Sun Java System Access Manager Authentication Bypass Vulnerability
BID:29676
Info
Sun Java System Access Manager Authentication Bypass Vulnerability
| Bugtraq ID: | 29676 |
| Class: | Unknown |
| CVE: |
CVE-2008-2705 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 11 2008 12:00AM |
| Updated: | May 07 2015 05:28PM |
| Credit: | Sun |
| Vulnerable: |
Sun Java System Access Manager 7.1 Windows Sun Java System Access Manager 7.1 Solaris x86 Sun Java System Access Manager 7.1 Solaris SPARC Sun Java System Access Manager 7.1 Linux Sun Java System Access Manager 7.1 HP-UX |
| Not Vulnerable: | |
Discussion
Sun Java System Access Manager Authentication Bypass Vulnerability
Sun Java System Access Manager is prone to an authentication-bypass vulnerability.
Exploiting this issue can allow remote attackers to access resources in an unauthorized manner or to gain administrative privileges to the application. This may aid in further attacks.
Sun Java System Access Manager 7.1 is affected by this issue.
Sun Java System Access Manager is prone to an authentication-bypass vulnerability.
Exploiting this issue can allow remote attackers to access resources in an unauthorized manner or to gain administrative privileges to the application. This may aid in further attacks.
Sun Java System Access Manager 7.1 is affected by this issue.
Exploit / POC
Sun Java System Access Manager Authentication Bypass Vulnerability
Attackers will likely exploit this issue using standard tools or client applications.
Attackers will likely exploit this issue using standard tools or client applications.
Solution / Fix
Sun Java System Access Manager Authentication Bypass Vulnerability
Solution:
Vendor patches are available. Contact the vendor for more information.
Solution:
Vendor patches are available. Contact the vendor for more information.
References
Sun Java System Access Manager Authentication Bypass Vulnerability
References:
References: