CVE-2008-6711
Summary
| CVE | CVE-2008-6711 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-04-10 22:00:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated users to execute arbitrary commands via unknown vectors related to "viewing system logs." |
Risk And Classification
Primary CVSS: v2.0 9 from [email protected]
AV:N/AC:L/Au:S/C:C/I:C/A:C
Problem Types: NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
SingleConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:L/Au:S/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Avaya | Communication Manager | 3.1 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.1 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.2 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.3 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.4 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.4 | sp1 | All | All |
| Application | Avaya | Communication Manager | 4.0 | All | All | All |
| Application | Avaya | Communication Manager | 4.0.1 | All | All | All |
| Application | Avaya | Communication Manager | 4.0.1 | sp15215 | All | All |
| Application | Avaya | Communication Manager | 4.0.1 | sp15500 | All | All |
| Application | Avaya | Communication Manager | 4.0.3 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| ASA-2008-270 | af854a3a-2127-422b-91ae-364da2661108 | support.avaya.com | Vendor Advisory |
| Avaya Communication Manager Multiple Security Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| www.osvdb.org/46581 | af854a3a-2127-422b-91ae-364da2661108 | www.osvdb.org | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Avaya Communication Manager Input Validation Vulnerabilities - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Nothing found for Research Details Php?id=80 | af854a3a-2127-422b-91ae-364da2661108 | www.voipshield.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.