CVE-2008-6711: Critical severity avaya aura communication manager vulnerability
Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated users to execute arbitrary commands via unknown vectors related to "viewing system logs."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6711?
CVE-2008-6711 is considered a high-severity vulnerability due to its potential for remote command execution.
How do I fix CVE-2008-6711?
To mitigate CVE-2008-6711, upgrade Avaya Communication Manager to version 3.1.4 SP2 or later, or 4.0.3 SP1 or later.
Who is affected by CVE-2008-6711?
CVE-2008-6711 affects remote authenticated users of Avaya Communication Manager versions prior to 3.1.4 SP2 and 4.0.3 SP1.
What can an attacker do with CVE-2008-6711?
An attacker exploiting CVE-2008-6711 can execute arbitrary commands on the system through the web administration interface.
Is there a workaround for CVE-2008-6711?
There are no recommended workarounds for CVE-2008-6711, making updates the only effective solution.