Medium WID-SEC-2024-0141 1 CVE

Avaya Aura Experience Portal: Schwachstelle ermöglicht Offenlegung von Informationen

Published Jan 17, 2024 · Updated Jan 17, 2024 · de-DE

Vendor: Avaya Product: Aura Experience Portal 8.x < patch 0402 Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Avaya Aura Experience Portal ausnutzen, um Informationen offenzulegen.

Product

Avaya Aura Experience Portal bietet Unternehmen einen zentralen Koordinationspunkt für alle automatisierten Sprach- und Multimediaanwendungen

Vulnerabilities 1

Medium 5.7

CVE-2023-7031

Avaya Experience Portal Manager Insecure Direct Object Reference Vulnerabilities

Insecure Direct Object Reference vulnerabilities were discovered in the Avaya Aura Experience Portal Manager which may allow partial information disclosure to an authenticated non-privileged user. Affected versions include 8.0.x and 8.1.x, prior to 8.1.2 patc…

Avaya Experience Portal Manager

Jan 17, 2024

Revision history

2024-01-17 #1
Initiale Fassung

References

Avaya Security Advisory vom 2024-01-17
https://support.avaya.com/css/public/documents/101088063
GitHub Advisory Database vom 2024-01-17
https://github.com/advisories/GHSA-5m34-qpjq-hjhf