Avaya Experience Portal Manager Insecure Direct Object Reference Vulnerabilities

CVE-2023-7031

4.3MEDIUM

Key Information

Vendor
Avaya
Status
Experience Portal Manager
Vendor
CVE Published:
17 January 2024

Summary

Insecure Direct Object Reference vulnerabilities were discovered in the Avaya Aura Experience Portal Manager which may allow partial information disclosure to an authenticated non-privileged user. Affected versions include 8.0.x and 8.1.x, prior to 8.1.2 patch 0402. Versions prior to 8.0 are end of manufacturer support.

Affected Version(s)

Experience Portal Manager <= 8.x.x

References

https://support.avaya.com/css/public/documents/101088063

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.