Avaya Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/avaya/ Sun, 26 Feb 2023 09:11:40 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Avaya Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/avaya/ 32 32 CVE-2008-6706 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6706/ Sun, 26 Feb 2023 09:11:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6706/ Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allow remote attackers to obtain (1) application server configuration, (2) database server configuration including encrypted passwords, (3) a system utility that decrypts “subscriber table passwords,” (4) a system utility that decrypts […]

The post CVE-2008-6706 appeared first on CVE Vulnerability.

]]> Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allow remote attackers to obtain (1) application server configuration, (2) database server configuration including encrypted passwords, (3) a system utility that decrypts “subscriber table passwords,” (4) a system utility that decrypts database passwords, and (5) a system utility that encrypts “subscriber table passwords.”

The post CVE-2008-6706 appeared first on CVE Vulnerability.

]]> CVE-2008-6707 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6707/ Sun, 26 Feb 2023 09:11:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6707/ The Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not perform authentication for certain functionality, which allows remote attackers to obtain sensitive information and access restricted functionality via (1) the certificate installation utility, (2) unspecified scripts in the objects folder, (3) an “unnecessary […]

The post CVE-2008-6707 appeared first on CVE Vulnerability.

]]> The Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not perform authentication for certain functionality, which allows remote attackers to obtain sensitive information and access restricted functionality via (1) the certificate installation utility, (2) unspecified scripts in the objects folder, (3) an “unnecessary default application,” (4) unspecified scripts in the states folder, (5) an unspecified “default application” that lists server configuration, and (6) “full system help.”

The post CVE-2008-6707 appeared first on CVE Vulnerability.

]]> CVE-2008-6708 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6708/ Sun, 26 Feb 2023 09:11:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6708/ Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x and 4.x, allows remote authenticated administrators to gain root privileges via unknown vectors related to configuration of “data viewing or restoring parameters.”

The post CVE-2008-6708 appeared first on CVE Vulnerability.

]]> Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x and 4.x, allows remote authenticated administrators to gain root privileges via unknown vectors related to configuration of “data viewing or restoring parameters.”

The post CVE-2008-6708 appeared first on CVE Vulnerability.

]]> CVE-2008-6709 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6709/ Sun, 26 Feb 2023 09:11:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6709/ Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allows remote authenticated users to execute arbitrary commands via unknown vectors related to configuration of “local data viewing or restoring parameters.”

The post CVE-2008-6709 appeared first on CVE Vulnerability.

]]> Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allows remote authenticated users to execute arbitrary commands via unknown vectors related to configuration of “local data viewing or restoring parameters.”

The post CVE-2008-6709 appeared first on CVE Vulnerability.

]]> CVE-2008-6710 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6710/ Sun, 26 Feb 2023 09:11:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6710/ Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated administrators to gain root privileges via unknown vectors related to “configuring data viewing or restoring credentials.”

The post CVE-2008-6710 appeared first on CVE Vulnerability.

]]> Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated administrators to gain root privileges via unknown vectors related to “configuring data viewing or restoring credentials.”

The post CVE-2008-6710 appeared first on CVE Vulnerability.

]]> CVE-2008-6711 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6711/ Sun, 26 Feb 2023 09:11:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6711/ Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated users to execute arbitrary commands via unknown vectors related to “viewing system logs.”

The post CVE-2008-6711 appeared first on CVE Vulnerability.

]]> Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated users to execute arbitrary commands via unknown vectors related to “viewing system logs.”

The post CVE-2008-6711 appeared first on CVE Vulnerability.

]]>