CVE-2008-6711

high

Description

Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated users to execute arbitrary commands via unknown vectors related to "viewing system logs."

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/43391

http://www.vupen.com/english/advisories/2008/1944/references

http://www.voipshield.com/research-details.php?id=80

http://www.securityfocus.com/bid/29939

http://www.osvdb.org/46581

http://support.avaya.com/elmodocs2/security/ASA-2008-270.htm

http://secunia.com/advisories/30799

Details

Source: Mitre, NVD

Published: 2009-04-10

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 9

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.01092