Lucene search

K
cveMitreCVE-2008-3425
HistoryJul 31, 2008 - 10:41 p.m.

CVE-2008-3425

2008-07-3122:41:00
CWE-287
mitre
web.nvd.nist.gov
19
cve-2008-3425
sun java system
web server
n1 service provisioning system
sps
remote authentication
administrative access
attack vectors

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.005

Percentile

76.9%

Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors.

Affected configurations

Nvd
Node
sunjava_system_web_server_pluginMatch7.0
OR
sunn1_service_provisioning_systemMatch5.2
OR
sunn1_service_provisioning_systemMatch6.0
VendorProductVersionCPE
sunjava_system_web_server_plugin7.0cpe:2.3:a:sun:java_system_web_server_plugin:7.0:*:*:*:*:*:*:*
sunn1_service_provisioning_system5.2cpe:2.3:a:sun:n1_service_provisioning_system:5.2:*:*:*:*:*:*:*
sunn1_service_provisioning_system6.0cpe:2.3:a:sun:n1_service_provisioning_system:6.0:*:*:*:*:*:*:*

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.005

Percentile

76.9%

Related for CVE-2008-3425