Avaya Support Forums  

Go Back   Avaya Support Forums > Avaya Aura & Unified Communications

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 02-19-2020, 06:03 AM
ardelapena ardelapena is offline
Aspiring Member
.
 
Join Date: Feb 2020
Posts: 1
ardelapena has 10 reputation points
Default One-X Communicator version 6.2 SP14 - Problem.

One of my customers says that his security team found encryption vulnerabilities in version 6.2 SP14 of the One-X Communicator. This version is indicated to overcome the vulnerabilities of the previous versions (one-X Communicator Weak Encryption Vulnerability CVE-2019-7006). Anyone have knowledge on this subject? Do we have any solution to this potential vulnerability? Any advice?
Thanks in advance!
Reply With Quote
  #2  
Old 02-20-2020, 12:39 PM
mlombardi1's Avatar
mlombardi1 mlombardi1 is offline
Legend
 
Join Date: Sep 2010
Location: New York
Posts: 443
mlombardi1 has 25 to 49 reputation pointsmlombardi1 has 25 to 49 reputation pointsmlombardi1 has 25 to 49 reputation points
Default

What specific flaws did the security scan yield? A patch for SP14 was released in Nov 2019 that can be found here: https://support.avaya.com/downloads/...eleaseId=6.2.x

The release notes for SP14 have yet to be updated to reference the patch and what it addresses.
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -7. The time now is 06:19 AM.

This Forum is provided solely for the use and convenience of Avaya customers and partners. Use of the Forum is subject to the Terms and Use and Privacy Statement found at www.avaya.com. No other use is permitted. The Forum including all content posted is “AS IS” and Avaya expressly disclaims all warranties and/or guarantees as to its accuracy, reliability, usefulness, quality or non-infringement of intellectual property. Avaya reserves the right to remove any content posted on the Forum at any time and for whatever reason.

Avaya will not be liable for any content posted on this Forum, including, without limitation, any errors or omissions or for any losses or damages of any kind incurred as a result of use or reliance on any content, regardless of its origin.

You expressly understand and agree that you assume all risks associated with use or reliance on this content.