Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-5422

Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors.

Published

2008-12-11T15:30:00.457

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-264
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sun ray_server_software 3.0 Yes
Application sun ray_server_software 3.1 Yes
Application sun ray_server_software 4.0 Yes
Operating System sun solaris 8 No
Operating System sun solaris 9 No
Operating System sun solaris 10 No
Application sun ray_server_software 3.1 Yes
Application sun ray_server_software 4.0 Yes
Operating System sun solaris 10 No
Application sun ray_server_software 3.1.1 Yes
Application sun ray_server_software 4.0 Yes
Operating System novell suse_linux_enterprise_server 9 No
Operating System redhat enterprise_linux 4 No
Application sun ray_server_software 3.0 Yes
Application sun ray_server_software 3.1 Yes
Application sun java_desktop_system 2.0 No
Operating System novell suse_linux_enterprise_server 8 No
Operating System redhat enterprise_linux 3 No
References