CVE-2018-15611

Summary

A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an authenticated, privileged user on the local system to gain root privileges. Affected versions include 6.3.x and all 7.x version prior to 7.1.3.1.

Affected Software

VendorProductVersion RangeStatus
AvayaCommunication Manager7.1.3.1 < 7.x*affected
AvayaCommunication Manager6.3.x < 6.3.x*affected

Weaknesses

  • CWE-284: CWE-284: Improper Access Control

ADP Enrichment

CVE Program Container

Additional References

References