Detections
Analytics

CVE-2018-6635

high

Description

System Manager in Avaya Aura before 7.1.2 does not properly use SSL in conjunction with authentication, which allows remote attackers to bypass intended Remote Method Invocation (RMI) restrictions, aka SMGR-26896.

References

http://www.securitytracker.com/id/1040329

http://www.securityfocus.com/bid/102940

https://downloads.avaya.com/css/P8/documents/101038598

Details

Source: Mitre, NVD

Published: 2018-02-05

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 6

Vector: CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.01561