CVE-2018-15610

Name of the Vulnerable Software and Affected Versions Avaya IP Office versions 9.1 through 9.1 SP12 Avaya IP Office versions 10.0 through 10.0 SP7 Avaya IP Office versions 10.1 through 10.1 SP2

Description A vulnerability in the one-X Portal component allows an authenticated attacker to read and delete arbitrary files on the system.

Recommendations For Avaya IP Office versions 9.1 through 9.1 SP12, update to a version outside of this range to resolve the issue. For Avaya IP Office versions 10.0 through 10.0 SP7, update to a version outside of this range to resolve the issue. For Avaya IP Office versions 10.1 through 10.1 SP2, update to a version outside of this range to resolve the issue.