VULNERABILITY INTELLIGENCE

CVE-2018-15611

CVSS score6.3 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2018-09-27
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

Description

A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an authenticated, privileged user on the local system to gain root privileges. Affected versions include 6.3.x and all 7.x version prior to 7.1.3.1.

Weakness classification

  • CWE-284: Improper Access Control

Primary references