CVE-2019-7007CWE-22

Avaya Equinox Conferencing Management (iView) Directory Traversal Vulnerability

High · published February 28, 2020

CVSS v3.1
7.5
EPSS
2%
Percentile
76.5
In the wild
Unconfirmed
What it is

A directory traversal vulnerability has been found in the Avaya Equinox Management(iView)versions R9.1.9.0 and earlier. Successful exploitation could potentially allow an unauthenticated attacker to access files that are outside the restricted directory on the remote server.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01659 · 76.5th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2020-02-28T22:00Z
EPSS history
Timeline
  • 28 FEB 22:00Z
    Avaya Equinox Conferencing Management (iView) Directory Traversal Vulnerability
    cvelistv5