Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Avaya Aura System Manager ausnutzen, um beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen.
Product
Der Avaya Aura System Manager ist ein Verwaltungswerkzeug für Avaya Produkte.
Vulnerabilities 2
-
Medium 6.5
Avaya Aura System Manager SQL injection vulnerability
A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privileges to execute arbitrary queries against the Avaya Aura System Manager database. Affected versions include 10.1.x.x and 10.2.x.x. Version…
-
Medium 4.2
Improper access control in Avaya Aura System Manager
An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-line interface (CLI) user with administrative privileges to read arbitrary files on the system. Affected versions include 10.1.x.x and 10.2.x.x. Versio…
Revision history
-
#1
Initiale Fassung
References
-
Avaya Aura System Manager Vulnerabilities vom 2024-08-08
https://support.avaya.com/css/public/documents/101091159
-
GitHub Advisory Database vom 2024-08-08
https://github.com/advisories/GHSA-898x-8mpw-mjf8