CVE-2021-25649: Avaya Utility Services Sensitive Information Disclosure Vulnerability
UNSUPPORTED WHEN ASSIGNED An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be available to a privileged user. Affects all 7.x versions of Avaya Aura Utility Services.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-25649?
CVE-2021-25649 is an information disclosure vulnerability in the directory and file management of Avaya Aura Utility Services.
What is the severity of CVE-2021-25649?
The severity of CVE-2021-25649 is medium with a severity value of 5.5.
How does CVE-2021-25649 affect Avaya Aura Utility Services?
CVE-2021-25649 may potentially allow any local user to access system functionality and configuration information that should only be available to authorized users.
Which version of Avaya Aura Utility Services is affected by CVE-2021-25649?
Avaya Aura Utility Services versions 7.0 to 7.1.3 are affected by CVE-2021-25649.
Is there a fix for CVE-2021-25649?
Currently, there is no fix available for CVE-2021-25649. It is recommended to follow Avaya's security advisory for updates and mitigation steps.