← CVE Intelligence

CVE-2023-7031

Avaya Experience Portal Manager Insecure Direct Object Reference Vulnerabilities PUBLISHED

Description (CNA)

Insecure Direct Object Reference vulnerabilities were discovered in the Avaya Aura Experience Portal Manager which may allow partial information disclosure to an authenticated non-privileged user. Affected versions include 8.0.x and 8.1.x, prior to 8.1.2 patch 0402. Versions prior to 8.0 are end of manufacturer support.

Affected (CNA)

Vendor / productVersions
Avaya / Experience Portal Manageraffected 8.x.x

CWE

CWE-200

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.