Description
A vulnerability in the Web UI component of Avaya Aura System Platform could allow a remote, unauthenticated user to perform a targeted deserialization attack that could result in remote code execution. Affected versions of System Platform includes 6.3.0 through 6.3.9 and 6.4.0 through 6.4.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Avaya | Avaya Aura® System Platform | 6.3.x – ≤ 6.3.9, 6.4.x – ≤ 6.4.2 | — |