Skip to content
CVE PROGRAM SOURCE RECORD4.2 Medium

CVE-2024-7480

Improper access control in Avaya Aura System Manager

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
avaya

Description

An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-line interface (CLI) user with administrative privileges to read arbitrary files on the system. Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer support.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Avaya Aura System Manager

Default version status: unaffected

  • 10.1.x.xaffected
  • 10.2.x.xaffected

References