CVE-2009-4314

2022-10-0316:24:04

mitre

www.cve.org

sun ray server

solaris 10

automatic multi-group hotdesking

physically proximate attackers

session access

6.4 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.3%

JSON

Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking (AMGH) is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for physically proximate attackers to obtain access to a session by going to an unattended DTU device.