CVE-2008-6706

3 documents3 sources
Severity
7.8HIGH
EPSS
0.8%
top 26.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Avaya Communication ManagerAvaya SIP Enablement Services
Timeline
PublishedApr 10
Latest updateMay 17

Description

Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allow remote attackers to obtain (1) application server configuration, (2) database server configuration including encrypted passwords, (3) a system utility that decrypts "subscriber table passwords," (4) a system utility that decrypts database passwords, and (5) a system utility that encrypts "subscriber table passwords."

CVSS vector

AV:N/AC:L/C:C/I:N/A:NExploitability: 10.0 | Impact: 6.9

Affected Packages2 packages

▶NVDavaya/communication_manager6 versions+5

🔴Vulnerability Details

2
GHSA
GHSA-3pvr-6w33-f6vc: Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3↗2022-05-17
▶
CVEList
CVE-2008-6706: Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3↗2009-04-10
▶