PT-2018-13117 · Avaya · Avaya Communication Manager

Lukasz Plonka · Publicado 2018-09-27 · Atualizado 2019-10-09 · CVE-2018-15611

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Avaya Aura Communication Manager versions 6.3.x through 7.1.3.0 Avaya Aura Communication Manager version 7.1.3.1 is not affected, so the range is prior to 7.1.3.1 for 7.x versions.

Description A vulnerability in the local system administration component can allow an authenticated, privileged user on the local system to gain root privileges.

Recommendations For Avaya Aura Communication Manager versions 6.3.x, update to version 7.1.3.1 or later. For Avaya Aura Communication Manager versions 7.x prior to 7.1.3.1, update to version 7.1.3.1 or later.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2018-15611

Produtos afetados

Avaya Communication Manager

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-15611 · Nota de Segurança
• https://downloads.avaya.com/css/P8/documents/101052550 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-15611 · Aviso do Fabricante