[email protected]CVE-2008-5710

HistoryDec 24, 2008 - 6:29 p.m.

CVE-2008-5710

2008-12-2418:29:00

CWE-16

[email protected]

web.nvd.nist.gov

avaya

communication manager

vulnerability

remote attackers

sensitive files

security issue

7.6 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

75.2%

JSON

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1.x, 4.0.3, and 5.x allow remote attackers to read (1) configuration files, (2) log files, (3) binary image files, and (4) help files via unknown vectors.

CPENameOperatorVersion
avaya:communication_manageravaya communication managereq5.0
avaya:communication_manageravaya communication managereq3.1.4
avaya:communication_manageravaya communication managereq3.1.2
avaya:communication_manageravaya communication managereq3.1.5
avaya:communication_manageravaya communication managereq3.1.1
avaya:communication_manageravaya communication managereq5.1.1
avaya:communication_manageravaya communication managereq5.1
avaya:communication_manageravaya communication managereq5.1.2
avaya:communication_manageravaya communication managereq3.1
avaya:communication_manageravaya communication managereq4.0.3

CPE	Name	Operator	Version
avaya:communication_manager	avaya communication manager	eq	5.0
avaya:communication_manager	avaya communication manager	eq	3.1.4
avaya:communication_manager	avaya communication manager	eq	3.1.2
avaya:communication_manager	avaya communication manager	eq	3.1.5
avaya:communication_manager	avaya communication manager	eq	3.1.1
avaya:communication_manager	avaya communication manager	eq	5.1.1
avaya:communication_manager	avaya communication manager	eq	5.1
avaya:communication_manager	avaya communication manager	eq	5.1.2
avaya:communication_manager	avaya communication manager	eq	3.1
avaya:communication_manager	avaya communication manager	eq	4.0.3

Rows per page:

1-10 of 111

References

secunia.com/advisories/32035

support.avaya.com/elmodocs2/security/ASA-2008-394.htm

www.securityfocus.com/bid/31639

www.voipshield.com/research-details.php?id=123

www.vupen.com/english/advisories/2008/2774

exchange.xforce.ibmcloud.com/vulnerabilities/45750

7.6 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

75.2%

JSON

Related for CVE-2008-5710

prion1 cvelist1