CVEvulnerability

CVE-2018-15611

6.7 MEDIUM Published 2018-09-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-09-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.3 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
6.7 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-284

Description

A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an authenticated, privileged user on the local system to gain root privileges. Affected versions include 6.3.x and all 7.x version prior to 7.1.3.1.

Affected configurations

• avaya aura communication manager (>= 6.3.0.1 <= 6.3.17.0) • avaya aura communication manager (>= 7.0 < 7.1.3.1)

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References