Reference: Security advisories
Last modified: Monday March 20, 2023.
On occasion, Ava Security discover — or are advised of — potential vulnerabilities in the Avigilon Alta products. When such an issue is discovered or reported, Avigilon Alta work to investigate and, if valid, resolve the issue. After providing fixes for all vulnerable versions of the products, Avigilon Alta releases details of the issue.
2023 advisories
- Alta-Aware-784 Preliminary vulnerability advisory
- Ava-739 Preliminary vulnerability advisory
- Ava-732: Denial of service to Cloud Connector when adding a specific third party camera
- Ava-731: Permission bugs in Aware API endpoints
- Ava-728: Vulnerability in Go could cause a denial of service
- Ava-725: Ava Aware iOS app accepts self-signed SSL certificates for WebSocket connections
- Ava-723: Secrets not sanitized in downloadable audit logs in Aware
2022 advisories