Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2018-15610

Improper access controls in IP Office one-X Portal

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
avaya

Description

A vulnerability in the one-X Portal component of Avaya IP Office allows an authenticated attacker to read and delete arbitrary files on the system. Affected versions of Avaya IP Office include 9.1 through 9.1 SP12, 10.0 through 10.0 SP7, and 10.1 through 10.1 SP2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Avaya IP Office

  • 9.1 through 9.1 SP12, 10.0 through 10.0 SP7, and 10.1 through 10.1 SP2affected

References