CVE-2020-7029mediumCWE-352

CVE-2020-7029: falha de média gravidade em Avaya Aura Communication Manager

Avaya Product System Management Interface Cross-Site Request Forgery Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Avaya Aura Communication Manager+ Monitorar Avaya Aura Messaging

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.4epss 0.4%
A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the System Management Interface Web component of Avaya Aura Communication Manager and Avaya Aura Messaging. This vulnerability could allow an unauthenticated remote attacker to perform Web administration actions with the privileged level of the authenticated user. Affected versions of Communication Manager are 7.0.x, 7.1.x prior to 7.1.3.5 and 8.0.x. Affected versions of Messaging are 7.0.x, 7.1 and 7.1 SP1.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L
Produtos afetados
Avaya · Avaya Aura Communication ManagerAvaya · Avaya Aura Messaging
CVEs relacionadas — Avaya Aura Communication Manager

No mesmo produto, das mais perigosas para as menos.

CVE-2022-2249HIGHAvaya Aura Communication Manager Privilege Escalation VulnerabilitiesEPSS 0.2%