1.7

CVE-2007-3700

EPSS 0.06%
Veröffentlicht 11.07.2007 23:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Sun Java System Access Manager (formerly Java System Identity Server) before 20070710, when the message debug level is configured in the com.iplanet.services.debug.level property in AMConfig.properties, logs cleartext login passwords, which allows local users to gain privileges by reading /var/opt/SUNWam/debug/amAuth.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Sun ≫ Java System Access Manager

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.06%	0.185

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	1.7	3.1	2.9	AV:L/AC:L/Au:S/C:P/I:N/A:N

http://osvdb.org/37249

http://secunia.com/advisories/26030

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101918-1

Patch

http://sunsolve.sun.com/search/document.do?assetkey=1-66-200386-1

http://www.securityfocus.com/bid/24859

http://www.securitytracker.com/id?1018370

http://www.vupen.com/english/advisories/2007/2496

https://exchange.xforce.ibmcloud.com/vulnerabilities/35339

https://nvd.nist.gov/vuln/detail/CVE-2007-3700

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-3700

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-3700

EUVD