CVE-2018-15610 HIGH

CVE-2018-15610: Improper access controls in IP Office one-X Portal

Vendor Avaya
Product IP Office
Weakness CWE-284
Published September 12, 2018
Last update August 5, 2024
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H

What the vulnerability does

01Description

A vulnerability in the one-X Portal component of Avaya IP Office allows an authenticated attacker to read and delete arbitrary files on the system. Affected versions of Avaya IP Office include 9.1 through 9.1 SP12, 10.0 through 10.0 SP7, and 10.1 through 10.1 SP2.

Key dates

02Disclosure timeline

September 12, 2018 CVE published
August 5, 2024 Record updated