Description
The Avid Nexis Agent uses a vulnerable gSOAP version. An undocumented vulnerability impacting gSOAP v2.8 makes the application vulnerable to an Unauthenticated Path Traversal vulnerability. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Avid Avid NEXIS E-series
Default version status: unaffected
0 to < 2025.5.1affected
Avid Avid NEXIS F-series
Default version status: unaffected
0 to < 2025.5.1affected
Avid Avid NEXIS PRO+
Default version status: unaffected
0 to < 2025.5.1affected
Avid System Director Appliance (SDA+)
Default version status: unaffected
0 to < 2025.5.1affected