PT-2019-9135 · Avaya · Avaya Communication Manager

Frank Cozijnsen · Publicado 2019-02-01 · Atualizado 2019-10-09 · CVE-2018-15617

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Avaya Aura Communication Manager versions 6.3.x through 7.1.3.1 Avaya Aura Communication Manager versions 8.0.0 through 8.0.0

Description A vulnerability in the "capro" process component could allow a remote, unauthenticated user to cause denial of service.

Recommendations For Avaya Aura Communication Manager versions 6.3.x through 7.1.3.1, update to version 7.1.3.2 or later. For Avaya Aura Communication Manager versions 8.0.0 through 8.0.0, update to version 8.0.1 or later.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2018-15617

Produtos afetados

Avaya Communication Manager

Referências · 4

• https://osv.dev/vulnerability/CVE-2018-15617 · Aviso do Fabricante
• http://securityfocus.com/bid/106826 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-15617 · Nota de Segurança
• https://downloads.avaya.com/css/P8/documents/101055396 · Aviso do Fabricante