Description (CNA)
A vulnerability in the Web UI component of Avaya Aura System Platform could allow a remote, unauthenticated user to perform a targeted deserialization attack that could result in remote code execution. Affected versions of System Platform includes 6.3.0 through 6.3.9 and 6.4.0 through 6.4.2.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Avaya / Avaya Aura® System Platform | affected 6.3.x through 6.3.9; affected 6.4.x through 6.4.2 |
CWE
CWE-502
References
ADP enrichment
No English description supplied.