7.5
CVE-2007-5152
- EPSS 2.83%
- Veröffentlicht 01.10.2007 05:17:00
- Zuletzt bearbeitet 16.06.2026 22:45:32
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 9.1 container, does not demand authentication after a container restart, which allows remote attackers to perform administrative tasks.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Java System Access Manager Version7.1 Editionhp-ux
Sun ≫ Java System Access Manager Version7.1 Editionlinux
Sun ≫ Java System Access Manager Version7.1 Editionsolaris_sparc
Sun ≫ Java System Access Manager Version7.1 Editionsolaris_x86
Sun ≫ Java System Access Manager Version7.1 Editionwindows
Sun ≫ Java System Application Server Version9.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.83% | 0.848 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
http://osvdb.org/37758
http://secunia.com/advisories/26976
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103069-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200839-1
http://www.securityfocus.com/bid/25842
http://www.securitytracker.com/id?1018753
http://www.vupen.com/english/advisories/2007/3282
https://exchange.xforce.ibmcloud.com/vulnerabilities/36846