CVE-2024-7480: Improper access control in Avaya Aura System Manager
An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-line interface (CLI) user with administrative privileges to read arbitrary files on the system. Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer support.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7480?
CVE-2024-7480 has a medium severity rating due to the improper access control allowing CLI users to read arbitrary files.
How do I fix CVE-2024-7480?
To fix CVE-2024-7480, upgrade Avaya Aura System Manager to version 10.2 or later.
Which versions are affected by CVE-2024-7480?
CVE-2024-7480 affects Avaya Aura System Manager versions 10.1.x.x and 10.2.x.x.
What risk does CVE-2024-7480 pose to my system?
CVE-2024-7480 poses a risk by potentially allowing unauthorized access to sensitive files by users with administrative privileges.
Is there a workaround for CVE-2024-7480?
There are no official workarounds for CVE-2024-7480; updating to a secure version is the recommended action.