CVE-2008-6711

Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated users to execute arbitrary commands via unknown vectors related to "viewing system logs."

Score

CVSS 2.0 9.0 Critical

Status

Modified - cve@mitre.org

Published

2009-04-10

Last modified

2024-08-07

Affected products

• Communication Manager (Avaya)

References

• http://secunia.com/advisories/30799
• http://support.avaya.com/elmodocs2/security/ASA-2008-270.htm
• http://www.osvdb.org/46581
• http://www.securityfocus.com/bid/29939
• http://www.voipshield.com/research-details.php?id=80
• http://www.vupen.com/english/advisories/2008/1944/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43391