CVE-2008-6711 - Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x b

CVE-2008-6711

Summary

Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated users to execute arbitrary commands via unknown vectors related to "viewing system logs."

References

Vulnerable Configurations

cpe:2.3:a:avaya:communication_manager:3.1:*:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:3.1:*:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:3.1.4:sp1:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:3.1.4:sp1:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:4.0:*:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:4.0:*:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:4.0.1:sp15215:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:4.0.1:sp15215:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:4.0.1:sp15500:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:4.0.1:sp15500:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_manager:4.0.3:*:*:*:*:*:*:*

CVSS

Base:	9.0 (as of 17-08-2017 - 01:29)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:S/C:C/I:C/A:C

refmap via4

bid	29939
confirm	http://support.avaya.com/elmodocs2/security/ASA-2008-270.htm
misc	http://www.voipshield.com/research-details.php?id=80
osvdb	46581
secunia	30799
vupen	ADV-2008-1944
xf	avaya-cm-log-command-execution(43391)

Last major update

17-08-2017 - 01:29

Published

10-04-2009 - 22:00

Last modified

17-08-2017 - 01:29