Avaya has acknowledged a weakness in Avaya Products, which can be exploited by malicious people to conduct brute force attacks.

For more information:
SA49345

The weakness is reported in the following products:
* Avaya Application Enablement Services versions 5.x and 6.x.
* Avaya Aura Presence Services versions 6.0.x.
* Avaya Aura Session Manager versions 1.1, 5.x, and 6.x.
* Avaya Aura System Manager versions 5.x and 6.x.
* Avaya Experience Portal versions 6.0.x.
* Avaya Meeting Exchange versions 5.x.
* Avaya Voice Portal versions 5.x.

Solution
The vendor recommends that local and network access to the affected systems be restricted until an update is available.
Original Advisory
https://downloads.avaya.com/css/P8/documents/100164390

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers