cve/2018/CVE-2018-6635.md

### [CVE-2018-6635](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6635)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

System Manager in Avaya Aura before 7.1.2 does not properly use SSL in conjunction with authentication, which allows remote attackers to bypass intended Remote Method Invocation (RMI) restrictions, aka SMGR-26896.

### POC

#### Reference
- https://downloads.avaya.com/css/P8/documents/101038598
- https://downloads.avaya.com/css/P8/documents/101038598

#### Github
No PoCs found on GitHub currently.