The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
InfoVulnerability
CVE-2008-5422: Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to…
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2008-5422
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 2.6%
Summary
Sun Ray Server Software 3.1 through 4.0 does not properly restrict access. Remote attackers can discover the Sun Ray administration password through unspecified vectors and obtain admin access to the Data Store and Administration GUI. The weakness is classified as CWE-264, Permissions, Privileges, and Access Controls.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.