| Package | Affected versions | Patched versions |
|---|---|---|
| aura | ≤ 7.1.1 |
System Manager in Avaya Aura before 7.1.2 does not properly use SSL in conjunction with authentication, which allows remote attackers to bypass intended Remote Method Invocation (RMI) restrictions, aka SMGR-26896.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free