Security Advisory

CVE-2018-15616

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-10-17 19:00:00
Last updated 2024-08-05 10:01:53
Assigner avaya
State PUBLISHED

Description

A vulnerability in the Web UI component of Avaya Aura System Platform could allow a remote, unauthenticated user to perform a targeted deserialization attack that could result in remote code execution. Affected versions of System Platform includes 6.3.0 through 6.3.9 and 6.4.0 through 6.4.2.