PT-2021-16727 · Avaya · Avaya Aura Utility Services

CVE-2021-25649 · Published 2021-06-24 · Updated 2024-08-03

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Avaya Aura Utility Services versions 7.x

Description An information disclosure issue was found in the directory and file management of Avaya Aura Utility Services. This issue may allow any local user to access system functionality and configuration information that should only be available to a privileged user.

Recommendations For Avaya Aura Utility Services versions 7.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2021-25649

Affected Products

Avaya Aura Utility Services

References · 5

• https://support.avaya.com/css/P8/documents/101072728 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-25649 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25649 · Security Note
• https://t.me/cvenotify/88842 · Telegram Post
• https://t.me/cvenotify/16841 · Telegram Post