NVD

Id
2318  
Name
CVE-2008-2402  
Description
The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read password hashes and configuration data via direct requests for unspecified documents.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-06-04  
Modified Date
2011-03-07  
Seq
2008-2402  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
14914 2318 CVE-2008-2402 20080603 Sun Java System Active Server Pages Information Disclosure Vulnerability  View
14915 2318 CVE-2008-2402 238184  View
14916 2318 CVE-2008-2402 29540  View
14917 2318 CVE-2008-2402 1020187  View
14918 2318 CVE-2008-2402 ADV-2008-1742  View
14919 2318 CVE-2008-2402 sunjava-active-password-info-disclosure(42828)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50515 JVNDB-2008-005825 Sun Java ASP Server の Admin Server におけるパスワードハッシュを読まれる脆弱性 Sun Java Active Server Pages (ASP) Server の Admin Server は、不十分なアクセスコントロールで Web ルート配下に重要な情報を格納するため、パスワードハッシュ、および設定データを読まれる脆弱性が存在します。 CVE-2008-2402 32515 CVE-2008-2402 2318 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005825.html 2008-06-03 2012-12-20 View