Secunia Security Advisory – Avaya has acknowledged some vulnerabilities in Avaya Call Management System (CMS) and Avaya Interactive Response (IR), which can be exploited by malicious, local users to gain escalated privileges.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/37642/sa15366.txt
Source: https://packetstormsecurity.com/files/37642/Secunia-Security-Advisory-15366.html