A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially allow a local user to escalate privileges. This issue affects Admin Lite and USB Creator 11.1 Feature Pack 2 Service Pack 1 and earlier versions.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ip_office | Avaya | * | 11.1 (excluding) |
| Ip_office | Avaya | 11.1 (including) | 11.1 (including) |
| Ip_office | Avaya | 11.1-feature_pack1 (including) | 11.1-feature_pack1 (including) |
| Ip_office | Avaya | 11.1-feature_pack1_service_pack1 (including) | 11.1-feature_pack1_service_pack1 (including) |
| Ip_office | Avaya | 11.1-feature_pack2 (including) | 11.1-feature_pack2 (including) |
| Ip_office | Avaya | 11.1-feature_pack2_service_pack1 (including) | 11.1-feature_pack2_service_pack1 (including) |