PT-2008-6762 · Avaya · Avaya Communication Manager

Published 2008-12-24 · Updated 2017-08-08 · CVE-2008-5710

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Avaya Communication Manager versions 3.1.x through 5.x Avaya Communication Manager version 4.0.3

Description The issue affects the web management interface, allowing remote attackers to read sensitive files, including configuration files, log files, binary image files, and help files, via unknown vectors.

Recommendations For Avaya Communication Manager versions 3.1.x through 5.x, update to a version that addresses the issue. For Avaya Communication Manager version 4.0.3, update to a version that addresses the issue. As a temporary workaround, consider restricting access to the web management interface to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2008-5710

Affected Products

Avaya Communication Manager

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2008-5710 · Security Note
• http://support.avaya.com/elmodocs2/security/ASA-2008-394.htm · Vendor Advisory
• http://secunia.com/advisories/32035 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45750 · Note
• http://securityfocus.com/bid/31639 · Note
• http://voipshield.com/research-details.php?id=123 · Note
• http://vupen.com/english/advisories/2008/2774 · Note