CVE-2018-15610CWE-284

Improper access controls in IP Office one-X Portal

High · published September 12, 2018

CVSS v3.0
7.3
EPSS
2%
Percentile
78.9
In the wild
Unconfirmed
What it is

A vulnerability in the one-X Portal component of Avaya IP Office allows an authenticated attacker to read and delete arbitrary files on the system. Affected versions of Avaya IP Office include 9.1 through 9.1 SP12, 10.0 through 10.0 SP7, and 10.1 through 10.1 SP2.

The record
Technical detail
CVSS v3.0
7.3 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01845 · 78.9th percentile
Weakness
CWE-284 · Improper Access Control
Published
2018-09-12T21:00Z
EPSS history
Timeline
  • 12 SEP 21:00Z
    Improper access controls in IP Office one-X Portal
    cvelistv5