CVE-2008-5422

CWE-2643 documents3 sources
Severity
7.5HIGH
EPSS
1.3%
top 20.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SUN RAY Server Software
Timeline
PublishedDec 11
Latest updateMay 14

Description

Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDsun/ray4 versions+3

Patches

Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-cmwg-v2gp-fqx6: Sun Sun Ray Server Software 3↗2022-05-14
▶
CVEList
CVE-2008-5422: Sun Sun Ray Server Software 3↗2008-12-11
▶
CVE-2008-5422 (HIGH CVSS 7.5) | Sun Sun Ray Server Software 3.1 thr | cvebase.io