CVE-2008-5422 Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store....
HighCVSS 7.5
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun ray server software | = 3.0 | No fix listed |
| sun ray server software | = 3.1 | No fix listed |
| sun ray server software | = 4.0 | No fix listed |
| sun ray server software | = 3.1.1 | No fix listed |
References
- 33108 third-party-advisory
- sunsolve.sun.com patch vendor-advisory
- 240365 patch vendor-advisory
- support.avaya.com
- 32769 patch vdb-entry
- 1021383 vdb-entry
- ADV-2008-3406 vdb-entry
- rayserver-unspecified-security-bypass(47253) vdb-entry