The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obtain sensitive information by sniffing the network.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mitel_nupoint_messenger | Mitel | r3 (including) | r3 (including) |
| Mitel_nupoint_messenger | Mitel | r11 (including) | r11 (including) |