CVEvulnerability
CVE-2008-6711
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-04-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Description
Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated users to execute arbitrary commands via unknown vectors related to "viewing system logs."
Affected configurations
• avaya communication manager 3.1
• avaya communication manager 3.1.1
• avaya communication manager 3.1.2
• avaya communication manager 3.1.3
• avaya communication manager 3.1.4
• avaya communication manager 4.0
• avaya communication manager 4.0.1
• avaya communication manager 4.0.3
References
- http://secunia.com/advisories/30799 secunia.com
- http://support.avaya.com/elmodocs2/security/ASA-2008-270.htm Vendor Advisory
- http://www.osvdb.org/46581 www.osvdb.org
- http://www.securityfocus.com/bid/29939 www.securityfocus.com
- http://www.voipshield.com/research-details.php?id=80 www.voipshield.com
- http://www.vupen.com/english/advisories/2008/1944/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43391 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/30799 secunia.com
- http://support.avaya.com/elmodocs2/security/ASA-2008-270.htm Vendor Advisory
- http://www.osvdb.org/46581 www.osvdb.org
- http://www.securityfocus.com/bid/29939 www.securityfocus.com
- http://www.voipshield.com/research-details.php?id=80 www.voipshield.com
- http://www.vupen.com/english/advisories/2008/1944/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43391 exchange.xforce.ibmcloud.com