4.4

CVE-2009-4314

Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking (AMGH) is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for physically proximate attackers to obtain access to a session by going to an unattended DTU device.

Data is provided by the National Vulnerability Database (NVD)
SunRay Server Software Version4.1 Editionsparc
   SunSolaris Version10 Editionsparc
   SunSolaris Version10 Editionx86
SunRay Server Software Version4.1 Editionx86
   SunSolaris Version10 Editionsparc
   SunSolaris Version10 Editionx86
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.05% 0.157
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.4 3.4 6.4
AV:L/AC:M/Au:N/C:P/I:P/A:P