Avaya Equinox Conferencing Management (iView) Directory Traversal Vulnerability
CVE-2019-7007

7.5HIGH

Key Information:

Vendor
Avaya
Status
Equinox Conferencing Management (iview)
Vendor
CVE Published:
28 February 2020

Summary

A directory traversal vulnerability has been found in the Avaya Equinox Management(iView)versions R9.1.9.0 and earlier. Successful exploitation could potentially allow an unauthenticated attacker to access files that are outside the restricted directory on the remote server.

Affected Version(s)

Equinox Conferencing Management (iView) 9.1 <= 9.1.9.0

References

https://downloads.avaya.com/css/P8/documents/101064450
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.