CVE-2008-5116

CWE-22 — Path Traversal3 documents3 sources
Severity
7.8HIGH
EPSS
0.7%
top 27.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SUN Java System Identity Manager
Timeline
PublishedNov 18
Latest updateMay 14

Description

Directory traversal vulnerability in idm/includes/helpServer.jsp in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to read arbitrary files in the filesystem of the IDM server via directory traversal sequences in the ext parameter.

CVSS vector

AV:N/AC:L/C:C/I:N/A:NExploitability: 10.0 | Impact: 6.9

Affected Packages1 packages

Patches

Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-hxp6-963m-8348: Directory traversal vulnerability in idm/includes/helpServer↗2022-05-14
▶
CVEList
CVE-2008-5116: Directory traversal vulnerability in idm/includes/helpServer↗2008-11-18
▶