CVE Vulnerabilities

CVE-2018-15611

Published: Sep 27, 2018 | Modified: Oct 09, 2019
CVSS 3.x
6.7
MEDIUM
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an authenticated, privileged user on the local system to gain root privileges. Affected versions include 6.3.x and all 7.x version prior to 7.1.3.1.

Affected Software

Name Vendor Start Version End Version
Aura_communication_manager Avaya 6.3.0.1 (including) 6.3.17.0 (including)
Aura_communication_manager Avaya 7.0 (including) 7.1.3.1 (excluding)

References