Skip to content
OpenAdvisories
Medium WID-SEC-2023-1330 3 CVEs

Avaya IX Workforce Engagement: Mehrere Schwachstellen

Published May 30, 2023 · Updated May 30, 2023 · de-DE

Vendor: Avaya Product: IX Workforce Engagement v15.2.7.1195 Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Avaya IX Workforce Engagement ausnutzen, um Informationen offenzulegen oder das Opfer unbemerkt umzuleiten.

Product

Avaya IX Workforce Engagement (ehemals Aura Workforce Optimization) dient der Auswertung aufgezeichneter Callcenter-Anrufe zur Verbesserung der Servicequalität.

Vulnerabilities 3

  • Medium 6.5
    CVE-2023-31187

    Avaya IX Workforce Engagement - CWE-522: Insufficiently Protected Credentials

    Avaya IX Workforce Engagement v15.2.7.1195 - CWE-522: Insufficiently Protected Credentials

    Avaya IX Workforce Engagement
  • Medium 6.1
    CVE-2023-32218

    Avaya IX Workforce Engagement - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

    Avaya IX Workforce Engagement v15.2.7.1195 - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

    Avaya IX Workforce Engagement
  • Medium 5.3
    CVE-2023-31186

    Avaya IX Workforce Engagement - User Enumeration - CWE-204: Observable Response Discrepancy

    Avaya IX Workforce Engagement v15.2.7.1195 - User Enumeration - Observable Response Discrepancy

    Avaya IX Workforce Engagement

Revision history

  1. #1

    Initiale Fassung

References