CVE-2011-3008

The default configuration of Avaya Secure Access Link (SAL) Gateway 1.5, 1.8, and 2.0 contains certain domain names in the Secondary Core Server URL and Secondary Remote Server URL fields, which allows remote attackers to obtain sensitive information by leveraging administrative access to these domain names, as demonstrated by alarm and log information.

• CWE-16

• http://support.avaya.com/css/P8/documents/100140483Vendor Advisory
• http://www.kb.cert.org/vuls/id/690315US Government Resource
• http://www.securityfocus.com/bid/48942
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68922
• http://support.avaya.com/css/P8/documents/100140483Vendor Advisory
• http://www.kb.cert.org/vuls/id/690315US Government Resource
• http://www.securityfocus.com/bid/48942
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68922

Published

Aug 5, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3002Almost Native Graphics Layer Engine (ANGLE), as used in Mozi…
• CVE-2011-3003Mozilla Firefox before 7.0 and SeaMonkey before 2.4 allow re…
• CVE-2011-3004The JSSubScriptLoader in Mozilla Firefox 4.x through 6 and S…
• CVE-2011-3005Use-after-free vulnerability in Mozilla Firefox 4.x through …
• CVE-2011-3006The MyAsUtil ActiveX control in MyAsUtil5.2.0.603.dll in McA…
• CVE-2011-3007The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS E…
• CVE-2011-3009Ruby before 1.8.6-p114 does not reset the random seed upon f…
• CVE-2011-3010Multiple cross-site scripting (XSS) vulnerabilities in TWiki…
• CVE-2011-3011BaseServiceImpl.class in CA ARCserve D2D r15 does not proper…
• CVE-2011-3012The ioQuake3 engine, as used in World of Padman 1.2 and earl…
• CVE-2011-3013WebAdmin in the Mobility Pack before 1.2 in Novell Data Sync…
• CVE-2011-3014The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x…