VYPR
← All advisories
Medium severity4.2NVD Advisory· Published Aug 8, 2024· Updated Jun 17, 2026

CVE-2024-7480

CVE-2024-7480

Description

An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-line interface (CLI) user with administrative privileges to read arbitrary files on the system. Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer support.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Avaya/Aura System Manager4 versions
    cpe:2.3:a:avaya:aura_system_manager:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:avaya:aura_system_manager:*:*:*:*:*:*:*:*range: >=10.1,<=10.1.2
    • cpe:2.3:a:avaya:aura_system_manager:10.2:*:*:*:*:*:*:*
    • (no CPE)range: 10.1.x.x, 10.2.x.x
    • (no CPE)range: 10.1.x.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.