CVE-2018-15616: Avaya Aura® System Platform, десериализация

Описание

Оригинално описание

A vulnerability in the Web UI component of Avaya Aura System Platform could allow a remote, unauthenticated user to perform a targeted deserialization attack that could result in remote code execution. Affected versions of System Platform includes 6.3.0 through 6.3.9 and 6.4.0 through 6.4.2.

Засегнати продукти

• Avaya Avaya Aura® System Platform: 6.3.x до 6.3.9; 6.4.x до 6.4.2

Вид слабост

• CWE-502 Десериализация на ненадеждни данни

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2018-15616
• https://nvd.nist.gov/vuln/detail/CVE-2018-15616
• https://downloads.avaya.com/css/P8/documents/101052865