CVE

Id
32519  
CVE No.
CVE-2008-2402  
Status
Candidate  
Description
The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read password hashes and configuration data via direct requests for unspecified documents.  
Phase
Assigned (20080522)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
352066 32519 CVE-2008-2402 IDEFENSE:20080603 Sun Java System Active Server Pages Information Disclosure Vulnerability  View
352067 32519 CVE-2008-2402 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=706  View
352068 32519 CVE-2008-2402 SUNALERT:238184  View
352069 32519 CVE-2008-2402 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1  View
352070 32519 CVE-2008-2402 BID:29540  View
352071 32519 CVE-2008-2402 URL:http://www.securityfocus.com/bid/29540  View
352072 32519 CVE-2008-2402 VUPEN:ADV-2008-1742  View
352073 32519 CVE-2008-2402 URL:http://www.vupen.com/english/advisories/2008/1742/references  View
352074 32519 CVE-2008-2402 SECTRACK:1020187  View
352075 32519 CVE-2008-2402 URL:http://www.securitytracker.com/id?1020187  View
352076 32519 CVE-2008-2402 SECUNIA:30523  View
352077 32519 CVE-2008-2402 URL:http://secunia.com/advisories/30523  View
352078 32519 CVE-2008-2402 XF:sunjava-active-password-info-disclosure(42828)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50518 JVNDB-2008-005828 Sun Java ASP Server の管理アプリケーションサーバにおける認証を回避される脆弱性 Sun Java Active Server Pages (ASP) Server の管理アプリケーションサーバには、認証を回避される脆弱性が存在します。 CVE-2008-2406 32519 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005828.html  View