CVE-2021-25654

CVE-2021-25654 affects Avaya Aura Device Services (versions 7.0–8.1.4.0). The root cause is an insecure temporary file handling mechanism that can allow a local user to craft and trigger scripts, leading to arbitrary code execution. Reports from multiple sources (PT Security, CNNVD, Red Hat/RedHa...