CVE-2008-5422

high

Description

Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/47253

http://www.vupen.com/english/advisories/2008/3406

http://www.securitytracker.com/id?1021383

http://www.securityfocus.com/bid/32769

http://support.avaya.com/elmodocs2/security/ASA-2008-502.htm

http://sunsolve.sun.com/search/document.do?assetkey=1-26-240365-1

http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1

http://secunia.com/advisories/33108

Details

Source: Mitre, NVD

Published: 2008-12-11

Updated: 2025-04-09

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N