PT-2004-1822 · Sun · Sun Java System Portal Server

Publicado 2004-07-23 · Atualizado 2017-07-11 · CVE-2004-0742

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Java System Portal Server version 6.2

Description The issue allows remote authenticated users to gain Calendar Server privileges and modify Calendar data. This is achieved by changing the display options to a non-default view.

Recommendations For Sun Java System Portal Server version 6.2, consider restricting access to the display options feature to prevent unauthorized modification of Calendar data. As a temporary workaround, limit the ability of remote authenticated users to change display options to a non-default view until a fix is available.

Correção

Identificadores relacionados

CVE-2004-0742

Produtos afetados

Sun Java System Portal Server

Referências · 7

• http://kb.cert.org/vuls/id/881254 · Nota
• http://securityfocus.com/bid/10788 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0742 · Nota
• http://secunia.com/advisories/12134 · Nota
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57586 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16776 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0742 · Nota de Segurança