PT-2008-6610 · Sun · Sun Java System Portal Server

Publicado 2008-12-12 · Atualizado 2017-08-08 · CVE-2008-5549

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sun Java System Portal Server versions 7.1 through 7.2

Description The issue allows remote attackers to access local files and read the product's configuration information. This is related to access to secure files by the ThemeServlet.

Recommendations For Sun Java System Portal Server versions 7.1 through 7.2, consider restricting access to the ThemeServlet to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-5549

Produtos afetados

Sun Java System Portal Server

Referências · 9

• http://securitytracker.com/id?1021380 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-124301-12-1 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/3408 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-138686-01-1 · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-243886-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-5549 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47256 · Nota
• http://secunia.com/advisories/33120 · Aviso do Fabricante
• http://securityfocus.com/bid/32770 · Nota