1. Home
  2. CVE Database
  3. CVE-2021-25649
MEDIUM · 4.9

CVE-2021-25649

An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially allow any local user to access system fun...

Vulnerability Description

An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be available to a privileged user. Affects all 7.x versions of Avaya Aura Utility Services

CVSS Score

4.9

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
AvayaAura Utility Services>= 7.0, <= 7.1.3

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2021-25649?

CVE-2021-25649 is a vulnerability with a CVSS score of 4.9 (MEDIUM). An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially allow any local user to access system fun...

How severe is CVE-2021-25649?

CVE-2021-25649 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-25649?

Check the references section above for vendor advisories and patch information. Affected products include: Avaya Aura Utility Services.