PT-2008-6610 · Sun · Sun Java System Portal Server

Published 2008-12-12 · Updated 2017-08-08 · CVE-2008-5549

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sun Java System Portal Server versions 7.1 through 7.2

Description The issue allows remote attackers to access local files and read the product's configuration information. This is related to access to secure files by the ThemeServlet.

Recommendations For Sun Java System Portal Server versions 7.1 through 7.2, consider restricting access to the ThemeServlet to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-5549

Affected Products

Sun Java System Portal Server

References · 9

• http://sunsolve.sun.com/search/document.do?assetkey=1-21-124301-12-1 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-138686-01-1 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-243886-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-5549 · Security Note
• http://secunia.com/advisories/33120 · Vendor Advisory
• http://securitytracker.com/id?1021380 · Note
• http://vupen.com/english/advisories/2008/3408 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47256 · Note
• http://securityfocus.com/bid/32770 · Note