1. Home
  2. CVE Database
  3. CVE-2021-25652
MEDIUM · 4.9

CVE-2021-25652

An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Appliance Virtualization Platform Utilities (AVPU). This vulnerability may potentially allow a...

Vulnerability Description

An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Appliance Virtualization Platform Utilities (AVPU). This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be available to a privileged user. Affects versions 8.0.0.0 through 8.1.3.1 of AVPU.

CVSS Score

4.9

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
AvayaAura Appliance Virtualization Platform>= 8.0.0.0, <= 8.1.3.1

Related Weaknesses (CWE)

CWE-668CWE-200

References

FAQ

What is CVE-2021-25652?

CVE-2021-25652 is a vulnerability with a CVSS score of 4.9 (MEDIUM). An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Appliance Virtualization Platform Utilities (AVPU). This vulnerability may potentially allow a...

How severe is CVE-2021-25652?

CVE-2021-25652 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-25652?

Check the references section above for vendor advisories and patch information. Affected products include: Avaya Aura Appliance Virtualization Platform.