CVE-2008-6710 : Unspecified vulnerability in the Web administration interface in Avaya Communica

Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated administrators to gain root privileges via unknown vectors related to "configuring data viewing or restoring credentials."

Published 2009-04-10 22:00:01

Updated 2025-04-09 00:30:58

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2008-6710

Avaya » Communication Manager » Version: 3.1.2
cpe:2.3:a:avaya:communication_manager:3.1.2:*:*:*:*:*:*:*
Matching versions
Avaya » Communication Manager » Version: 4.0.1 Update Sp15500
cpe:2.3:a:avaya:communication_manager:4.0.1:sp15500:*:*:*:*:*:*
Matching versions
Avaya » Communication Manager » Version: 4.0.1 Update Sp15215
cpe:2.3:a:avaya:communication_manager:4.0.1:sp15215:*:*:*:*:*:*
Matching versions
Avaya » Communication Manager » Version: 4.0
cpe:2.3:a:avaya:communication_manager:4.0:*:*:*:*:*:*:*
Matching versions
Avaya » Communication Manager » Version: 4.0.1
cpe:2.3:a:avaya:communication_manager:4.0.1:*:*:*:*:*:*:*
Matching versions
Avaya » Communication Manager » Version: 3.1.3
cpe:2.3:a:avaya:communication_manager:3.1.3:*:*:*:*:*:*:*
Matching versions
Avaya » Communication Manager » Version: 3.1.1
cpe:2.3:a:avaya:communication_manager:3.1.1:*:*:*:*:*:*:*
Matching versions
Avaya » Communication Manager » Version: 4.0.3
cpe:2.3:a:avaya:communication_manager:4.0.3:*:*:*:*:*:*:*
Matching versions
Avaya » Communication Manager » Version: 3.1
cpe:2.3:a:avaya:communication_manager:3.1:*:*:*:*:*:*:*
Matching versions
Avaya » Communication Manager » Version: 4.0.2
cpe:2.3:a:avaya:communication_manager:4.0.2:*:*:*:*:*:*:*
Matching versions
Avaya » Communication Manager » Version: 4.0.2 Update SP1
cpe:2.3:a:avaya:communication_manager:4.0.2:sp1:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2008-6710

EPSS FAQ

1.87%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 81 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2008-6710

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.0	HIGH	AV:N/AC:L/Au:S/C:C/I:C/A:C	8.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2008-6710

Jump to

Vulnerability Details : CVE-2008-6710

Products affected by CVE-2008-6710

Exploit prediction scoring system (EPSS) score for CVE-2008-6710

CVSS scores for CVE-2008-6710

References for CVE-2008-6710