VULNERABILITY INTELLIGENCE

CVE-2018-6635

CVSS score7.5 HIGH
EPSS probability1.17%
CISA KEVNot currently listed
Published2018-02-05
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

System Manager in Avaya Aura before 7.1.2 does not properly use SSL in conjunction with authentication, which allows remote attackers to bypass intended Remote Method Invocation (RMI) restrictions, aka SMGR-26896.

Weakness classification

  • CWE-326: Inadequate Encryption Strength

Primary references