Lucene search

K
nvd[email protected]NVD:CVE-2008-6708
HistoryApr 10, 2009 - 10:00 p.m.

CVE-2008-6708

2009-04-1022:00:00
web.nvd.nist.gov
2

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0.005

Percentile

75.9%

Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x and 4.x, allows remote authenticated administrators to gain root privileges via unknown vectors related to configuration of “data viewing or restoring parameters.”

Affected configurations

Nvd
Node
avayacommunication_managerMatch3.1
OR
avayacommunication_managerMatch3.1.1
OR
avayacommunication_managerMatch3.1.2
OR
avayacommunication_managerMatch3.1.3
OR
avayacommunication_managerMatch3.1.4
OR
avayacommunication_managerMatch3.1.5
OR
avayacommunication_managerMatch4.0
OR
avayacommunication_managerMatch4.0.1
OR
avayacommunication_managerMatch4.0.1sp15215
OR
avayacommunication_managerMatch4.0.1sp15500
OR
avayacommunication_managerMatch4.0.3
OR
avayasip_enablement_servicesMatch3.0
VendorProductVersionCPE
avayacommunication_manager3.1cpe:2.3:a:avaya:communication_manager:3.1:*:*:*:*:*:*:*
avayacommunication_manager3.1.1cpe:2.3:a:avaya:communication_manager:3.1.1:*:*:*:*:*:*:*
avayacommunication_manager3.1.2cpe:2.3:a:avaya:communication_manager:3.1.2:*:*:*:*:*:*:*
avayacommunication_manager3.1.3cpe:2.3:a:avaya:communication_manager:3.1.3:*:*:*:*:*:*:*
avayacommunication_manager3.1.4cpe:2.3:a:avaya:communication_manager:3.1.4:*:*:*:*:*:*:*
avayacommunication_manager3.1.5cpe:2.3:a:avaya:communication_manager:3.1.5:*:*:*:*:*:*:*
avayacommunication_manager4.0cpe:2.3:a:avaya:communication_manager:4.0:*:*:*:*:*:*:*
avayacommunication_manager4.0.1cpe:2.3:a:avaya:communication_manager:4.0.1:*:*:*:*:*:*:*
avayacommunication_manager4.0.1cpe:2.3:a:avaya:communication_manager:4.0.1:sp15215:*:*:*:*:*:*
avayacommunication_manager4.0.1cpe:2.3:a:avaya:communication_manager:4.0.1:sp15500:*:*:*:*:*:*
Rows per page:
1-10 of 121

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0.005

Percentile

75.9%

Related for NVD:CVE-2008-6708