CVE-2008-5423

CWE-200 — Information Exposure3 documents3 sources
Severity
4.3MEDIUM
EPSS
0.1%
top 76.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SUN RAY Server SoftwareSUN RAY Windows Connector
Timeline
PublishedDec 11
Latest updateMay 14

Description

Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors related to the utconfig component of the Server Software and the uttscadm component of the Windows Connector.

CVSS vector

AV:L/AC:L/C:P/I:P/A:PExploitability: 3.1 | Impact: 6.4

Affected Packages2 packages

▶NVDsun/ray4 versions+3

Patches

Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-qqwr-63rw-jm36: Sun Sun Ray Server Software 3↗2022-05-14
▶
CVEList
CVE-2008-5423: Sun Sun Ray Server Software 3↗2008-12-11
▶
CVE-2008-5423 (MEDIUM CVSS 4.3) | Sun Sun Ray Server Software 3.x and | cvebase.io