Orchestration Designer Runtime Config CSRF

CVE-2018-15612

8.3HIGH

Key Information

Vendor
Avaya
Status
Orchestration Designer
Vendor
CVE Published:
21 September 2018

Summary

A CSRF vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could allow an attacker to add, change, or remove administrative settings. Affected versions of Avaya Aura Orchestration Designer include all versions up to 7.2.1.

Affected Version(s)

Orchestration Designer = All versions up to 7.2.1

References

https://downloads.avaya.com/css/P8/documents/101052293
x_refsource_CONFIRM

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.