NVD

Id
56634  
Name
CVE-2007-4511  
Description
The Sun Admin Console in Sun Application Server 9.0_0.1 does not apply certain configuration changes persistently, which causes the (1) SSL and (2) SSL_MutualAuth ORB listener services to enable all protocols and ciphers after the services are restarted, possibly allowing remote attackers to bypass intended policy.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-08-23  
Modified Date
2008-11-15  
Seq
2007-4511  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
288594 56634 CVE-2007-4511 20070822 Encryption Weakness in Sun Sun AS 9.0_0.1 (build b02-p01)  View
288595 56634 CVE-2007-4511 25400  View
288596 56634 CVE-2007-4511 sun-applicationserver-ssl-weak-security(36169)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57324 JVNDB-2007-006016 Sun Application Server の Sun Admin Console におけるポリシーを回避される脆弱性 Sun Application Server の Sun Admin Console は、特定の設定変更を永続的に適用しないため、(1) SSL、(2) SSL_MutualAuth ORB の待ち受けサービスが、サービスの再起動後、全てのプロトコルおよび暗号化を有効にするため、ポリシーを回避される脆弱性が存在します。 CVE-2007-4511 27866 CVE-2007-4511 56634 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006016.html 2007-08-23 2012-12-20 View