What is the severity of CVE-2023-7031?

CVE-2023-7031 is categorized as a low to medium severity vulnerability due to the potential for partial information disclosure to authenticated users.

How do I fix CVE-2023-7031?

To mitigate CVE-2023-7031, users should update to Avaya Aura Experience Portal versions 8.1.2 patch 0402 or later.

What are the affected versions in CVE-2023-7031?

The affected versions in CVE-2023-7031 are Avaya Aura Experience Portal 8.0.x and 8.1.x prior to 8.1.2 patch 0402.

What type of vulnerability is CVE-2023-7031?

CVE-2023-7031 is classified as an Insecure Direct Object Reference vulnerability.

Who is at risk from CVE-2023-7031?

Authenticated non-privileged users of Avaya Aura Experience Portal could be at risk of partial information disclosure due to CVE-2023-7031.

Vulnerability/
CVE-2023-7031

medium

5.7

CWE

200 639

EPSS

0.045%

17/1/2024

3/9/2024

CVE-2023-7031: Avaya Experience Portal Manager Insecure Direct Object Reference Vulnerabilities

First published: Wed Jan 17 2024(Updated: )

Insecure Direct Object Reference vulnerabilities were discovered in the Avaya Aura Experience Portal Manager which may allow partial information disclosure to an authenticated non-privileged user. Affected versions include 8.0.x and 8.1.x, prior to 8.1.2 patch 0402. Versions prior to 8.0 are end of manufacturer support.

Credit: securityalerts@avaya.com

Affected Software	Affected Version	How to fix
Avaya Aura Experience Portal	>=8.0.0<8.1.2.0.0402

Never miss a vulnerability like this again

Reference Links

https://support.avaya.com/css/public/documents/101088063

Frequently Asked Questions

What is the severity of CVE-2023-7031?
CVE-2023-7031 is categorized as a low to medium severity vulnerability due to the potential for partial information disclosure to authenticated users.
How do I fix CVE-2023-7031?
To mitigate CVE-2023-7031, users should update to Avaya Aura Experience Portal versions 8.1.2 patch 0402 or later.
What are the affected versions in CVE-2023-7031?
The affected versions in CVE-2023-7031 are Avaya Aura Experience Portal 8.0.x and 8.1.x prior to 8.1.2 patch 0402.
What type of vulnerability is CVE-2023-7031?
CVE-2023-7031 is classified as an Insecure Direct Object Reference vulnerability.
Who is at risk from CVE-2023-7031?
Authenticated non-privileged users of Avaya Aura Experience Portal could be at risk of partial information disclosure due to CVE-2023-7031.

agent/references
agent/title
agent/type
agent/description
agent/first-publish-date
agent/author
agent/event
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/weakness
agent/severity
agent/softwarecombine
agent/tags
collector/epss-latest
source/FIRST
agent/epss
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
vendor/avaya
canonical/avaya aura experience portal
version/avaya aura experience portal/8.0.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.