PT-2008-6762 · Avaya · Avaya Communication Manager

Publicado 2008-12-24 · Atualizado 2017-08-08 · CVE-2008-5710

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Avaya Communication Manager versions 3.1.x through 5.x Avaya Communication Manager version 4.0.3

Description The issue affects the web management interface, allowing remote attackers to read sensitive files, including configuration files, log files, binary image files, and help files, via unknown vectors.

Recommendations For Avaya Communication Manager versions 3.1.x through 5.x, update to a version that addresses the issue. For Avaya Communication Manager version 4.0.3, update to a version that addresses the issue. As a temporary workaround, consider restricting access to the web management interface to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2008-5710

Produtos afetados

Avaya Communication Manager

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/45750 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5710 · Nota de Segurança
• http://securityfocus.com/bid/31639 · Nota
• http://support.avaya.com/elmodocs2/security/ASA-2008-394.htm · Aviso do Fabricante
• http://voipshield.com/research-details.php?id=123 · Nota
• http://vupen.com/english/advisories/2008/2774 · Nota
• http://secunia.com/advisories/32035 · Aviso do Fabricante