Lucene search

K
nvd[email protected]NVD:CVE-2008-3425
HistoryJul 31, 2008 - 10:41 p.m.

CVE-2008-3425

2008-07-3122:41:00
CWE-287
web.nvd.nist.gov
5

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.005

Percentile

76.9%

Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors.

Affected configurations

Nvd
Node
sunjava_system_web_server_pluginMatch7.0
OR
sunn1_service_provisioning_systemMatch5.2
OR
sunn1_service_provisioning_systemMatch6.0
VendorProductVersionCPE
sunjava_system_web_server_plugin7.0cpe:2.3:a:sun:java_system_web_server_plugin:7.0:*:*:*:*:*:*:*
sunn1_service_provisioning_system5.2cpe:2.3:a:sun:n1_service_provisioning_system:5.2:*:*:*:*:*:*:*
sunn1_service_provisioning_system6.0cpe:2.3:a:sun:n1_service_provisioning_system:6.0:*:*:*:*:*:*:*

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.005

Percentile

76.9%

Related for NVD:CVE-2008-3425