Detail
Attempts to enumerate users in Avaya IP Office systems 7.x.
Avaya IP Office systems allow unauthenticated access to the URI '/system/user/scn_user_list' which returns a XML file containing user information such as display name, full name and extension number.
- Tested on Avaya IP Office 7.0(27).
Solution Advice
When security updates for IP Office software become available, the user can install them themselves or hire an installer from the customer care support group to do so.
Get AI-powered remediation steps tailored to your asset.
Try AI Solutions →