CVE-2024-7480 — Improper access control in Avaya Aura System Manager

CVE-2024-7480

Improper access control in Avaya Aura System Manager PUBLISHED

Description (CNA)

An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-line interface (CLI) user with administrative privileges to read arbitrary files on the system. Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer support.

Affected (CNA)

Vendor / product	Versions
Avaya / Aura System Manager	affected 10.1.x.x; affected 10.2.x.x

CWE

CWE-266

References

https://download.avaya.com/css/public/documents/101091159

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.