{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-10-08T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1.x, 4.0.3, and 5.x allow remote attackers to read (1) configuration files, (2) log files, (3) binary image files, and (4) help files via unknown vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-07T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "ADV-2008-2774", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/2774"}, {"name": "avaya-cm-configuration-info-disclosure(45750)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45750"}, {"name": "32035", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/32035"}, {"tags": ["x_refsource_MISC"], "url": "http://www.voipshield.com/research-details.php?id=123"}, {"name": "31639", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/31639"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-394.htm"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2008-5710", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1.x, 4.0.3, and 5.x allow remote attackers to read (1) configuration files, (2) log files, (3) binary image files, and (4) help files via unknown vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "ADV-2008-2774", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/2774"}, {"name": "avaya-cm-configuration-info-disclosure(45750)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45750"}, {"name": "32035", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/32035"}, {"name": "http://www.voipshield.com/research-details.php?id=123", "refsource": "MISC", "url": "http://www.voipshield.com/research-details.php?id=123"}, {"name": "31639", "refsource": "BID", "url": "http://www.securityfocus.com/bid/31639"}, {"name": "http://support.avaya.com/elmodocs2/security/ASA-2008-394.htm", "refsource": "CONFIRM", "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-394.htm"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T11:04:44.172Z"}, "title": "CVE Program Container", "references": [{"name": "ADV-2008-2774", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2008/2774"}, {"name": "avaya-cm-configuration-info-disclosure(45750)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45750"}, {"name": "32035", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/32035"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.voipshield.com/research-details.php?id=123"}, {"name": "31639", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/31639"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-394.htm"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-5710", "datePublished": "2008-12-24T17:00:00", "dateReserved": "2008-12-24T00:00:00", "dateUpdated": "2024-08-07T11:04:44.172Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:avaya:communication_manager:3.1:*:*:*:*:*:*:*", "matchCriteriaId": "88F5C363-3A38-43FC-A06D-73E280AB844B", "vulnerable": true}, {"criteria": "cpe:2.3:a:avaya:communication_manager:3.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "C4030E5D-BC15-481D-A15E-98FAE65130D9", "vulnerable": true}, {"criteria": "cpe:2.3:a:avaya:communication_manager:3.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "F3FC3A86-CE3D-4C12-9E31-7F7280EF9D28", "vulnerable": true}, {"criteria": "cpe:2.3:a:avaya:communication_manager:3.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "BBD119B9-FE11-4165-943D-119E906DC013", "vulnerable": true}, {"criteria": "cpe:2.3:a:avaya:communication_manager:3.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "89F99C5C-C184-4A5C-B8BA-F558C4A38730", "vulnerable": true}, {"criteria": "cpe:2.3:a:avaya:communication_manager:3.1.4:sp1:*:*:*:*:*:*", "matchCriteriaId": "1EAA2BC9-4794-4441-8AA8-3C1B7297FD06", "vulnerable": true}, {"criteria": "cpe:2.3:a:avaya:communication_manager:3.1.4:sp2:*:*:*:*:*:*", "matchCriteriaId": "423E4EEB-3D6F-449E-B623-C8D051E8FA3B", "vulnerable": true}, {"criteria": "cpe:2.3:a:avaya:communication_manager:3.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "87089C0E-2241-46A7-93EE-EC41D52A89C6", "vulnerable": true}, {"criteria": "cpe:2.3:a:avaya:communication_manager:3.1.5:sp0:*:*:*:*:*:*", "matchCriteriaId": "5BD89D61-0B42-4DDE-99F1-71570A37A136", "vulnerable": true}, {"criteria": "cpe:2.3:a:avaya:communication_manager:4.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "825C1D4E-CD86-4122-84D7-CF1CB4CF8F10", "vulnerable": true}, {"criteria": "cpe:2.3:a:avaya:communication_manager:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "84E2136B-6FE3-4548-A89D-444ED9393C22", "vulnerable": true}, {"criteria": "cpe:2.3:a:avaya:communication_manager:5.0:sp1:*:*:*:*:*:*", "matchCriteriaId": "FB4B7CCA-3961-48BC-ABFD-A608B39BD921", "vulnerable": true}, {"criteria": "cpe:2.3:a:avaya:communication_manager:5.0:sp2:*:*:*:*:*:*", "matchCriteriaId": "F9DD5F5B-5F44-422C-B9D9-731B53981BEB", "vulnerable": true}, {"criteria": "cpe:2.3:a:avaya:communication_manager:5.0:sp3:*:*:*:*:*:*", "matchCriteriaId": "AD401628-23D0-4CC0-8D30-B10910533003", "vulnerable": true}, {"criteria": "cpe:2.3:a:avaya:communication_manager:5.1:*:*:*:*:*:*:*", "matchCriteriaId": "0A32A986-3DB3-4CB5-AF52-12D83C4A6B95", "vulnerable": true}, {"criteria": "cpe:2.3:a:avaya:communication_manager:5.1:sp1:*:*:*:*:*:*", "matchCriteriaId": "223037D6-1345-4705-BB88-E814211D666D", "vulnerable": true}, {"criteria": "cpe:2.3:a:avaya:communication_manager:5.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "4ED0CFA4-C45E-465B-9F45-EB0742305CBC", "vulnerable": true}, {"criteria": "cpe:2.3:a:avaya:communication_manager:5.1.1:sp1:*:*:*:*:*:*", "matchCriteriaId": "22364E59-5248-43E3-8B6A-E646188F69E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:avaya:communication_manager:5.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "120EA1E2-EEF0-4FF6-960D-34FF9E88F2F3", "vulnerable": true}, {"criteria": "cpe:2.3:a:avaya:communication_manager:5.1.2:sp0:*:*:*:*:*:*", "matchCriteriaId": "ED8A8551-7374-4A21-B141-10BE4CEF222F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1.x, 4.0.3, and 5.x allow remote attackers to read (1) configuration files, (2) log files, (3) binary image files, and (4) help files via unknown vectors."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades sin especificar en la interfaz de gesti\u00f3n web en Avaya Communication Manager (CM) 3.1.x, 4.0.3 y 5.x permite a atacantes remotos leer (1) archivos de configuraci\u00f3n, (2) archivos de log, (3) archivos binarios de imagen y (4) archivos de ayuda mediante vectores desconocidos."}], "id": "CVE-2008-5710", "lastModified": "2024-11-21T00:54:42.553", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}]}, "published": "2008-12-24T18:29:15.813", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/32035"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-394.htm"}, {"source": "[email protected]", "url": "http://www.securityfocus.com/bid/31639"}, {"source": "[email protected]", "url": "http://www.voipshield.com/research-details.php?id=123"}, {"source": "[email protected]", "url": "http://www.vupen.com/english/advisories/2008/2774"}, {"source": "[email protected]", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45750"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/32035"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-394.htm"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/31639"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.voipshield.com/research-details.php?id=123"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2008/2774"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45750"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-16"}], "source": "[email protected]", "type": "Primary"}]}

{}