PT-2023-23664 · Avaya · Avaya Ix Workforce Engagement

Published 2023-05-30 · Updated 2023-06-02 · CVE-2023-32218

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Avaya IX Workforce Engagement version 15.2.7.1195

Description The issue is related to URL redirection to untrusted sites, also known as an 'Open Redirect'. This occurs when a web application redirects a user to a URL without properly validating it, potentially allowing an attacker to redirect the user to a malicious site.

Recommendations For Avaya IX Workforce Engagement version 15.2.7.1195, consider restricting access to untrusted URLs as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2023-32218

Affected Products

Avaya Ix Workforce Engagement

References · 5

• https://osv.dev/vulnerability/CVE-2023-32218 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32218 · Security Note
• https://t.me/cvenotify/51642 · Telegram Post
• https://t.me/cibsecurity/64797 · Telegram Post
• https://gov.il/en/Departments/faq/cve_advisories · Note