PT-2018-13116
CVE-2018-15610
·
Publicado
2018-09-12
·
Atualizado
2019-10-03
Descrição por
CVSS 2.0
9.0
AltaMétricasAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Avaya IP Office versions 9.1 through 9.1 SP12
Avaya IP Office versions 10.0 through 10.0 SP7
Avaya IP Office versions 10.1 through 10.1 SP2
Description
A vulnerability in the one-X Portal component allows an authenticated attacker to read and delete arbitrary files on the system.
Recommendations
For Avaya IP Office versions 9.1 through 9.1 SP12, update to a version outside of this range to resolve the issue.
For Avaya IP Office versions 10.0 through 10.0 SP7, update to a version outside of this range to resolve the issue.
For Avaya IP Office versions 10.1 through 10.1 SP2, update to a version outside of this range to resolve the issue.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾