CVE-2005-0506: Avaya IP Office Phone Manager
Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.
The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users to steal usernames and passwords and impersonate other users via keys such as Avaya\IP400\Generic.
Affected products
Published 2005-03-14. Last modified 2026-06-16.