PT-2018-13121
CVE-2018-15616
·
Published
2018-10-17
·
Updated
2019-10-09
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Avaya Aura System Platform versions 6.3.0 through 6.3.9
Avaya Aura System Platform versions 6.4.0 through 6.4.2
Description
A remote, unauthenticated user could perform a targeted deserialization attack, potentially resulting in remote code execution, due to a vulnerability in the Web UI component.
Recommendations
For versions 6.3.0 through 6.3.9, update to a version outside of this range to resolve the issue.
For versions 6.4.0 through 6.4.2, update to a version outside of this range to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾