CVE-2008-6710: Critical severity avaya aura communication manager vulnerability
Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated administrators to gain root privileges via unknown vectors related to "configuring data viewing or restoring credentials."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6710?
CVE-2008-6710 is considered a high severity vulnerability due to the potential for remote authenticated administrators to gain root privileges.
How do I fix CVE-2008-6710?
To fix CVE-2008-6710, upgrade Avaya Communication Manager to version 3.1.4 SP2 or 4.0.3 SP1 or later.
Which versions of Avaya Communication Manager are affected by CVE-2008-6710?
Avaya Communication Manager versions 3.1.x before 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 are affected by CVE-2008-6710.
What types of access does CVE-2008-6710 allow the attacker?
CVE-2008-6710 allows remote authenticated administrators to gain unauthorized root privileges.
Is there a public exploit available for CVE-2008-6710?
As of now, there is no public exploit reported for CVE-2008-6710, but its potential risk is significant given the privilege escalation.