CVE-2008-6707

The Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not perform…

published April 10, 2009

CVSS
—
EPSS
1%
Percentile
74.0
In the wild
Unconfirmed
What it is

The Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not perform authentication for certain functionality, which allows remote attackers to obtain sensitive information and access restricted functionality via (1) the certificate installation utility, (2) unspecified scripts in the objects folder, (3) an "unnecessary default application," (4) unspecified scripts in the states folder, (5) an unspecified "default application" that lists server configuration, and (6) "full system help."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01498 · 74.0th percentile
Published
2009-04-10T15:00Z
EPSS history
Timeline
  • 10 APR 15:00Z
    The Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not perform…
    cvelistv5