CyberSec.Space Logo
CVEブラウザに戻る

CVE-2008-2705

CRITICAL
9.3
CVSS Severity Score
EPSS Score0.1470%
EPSS Percentile2.28th
Published2008年6月16日
Last Modified2026年4月23日

Vulnerability Description

Unspecified vulnerability in Sun Java System Access Manager (AM) 7.1, when used with certain versions and configurations of Sun Directory Server Enterprise Edition (DSEE), allows remote attackers to bypass authentication via unspecified vectors.

Affected Platforms (CPE)

📦
Sun

Java System Access Manager

= 7.1

References & Advisories

🔗 http://secunia.com/advisories/30652
🔗 http://sunsolve.sun.com/search/document.do?assetkey=1-26-238416-1
🔗 http://www.securityfocus.com/bid/29676
🔗 http://www.securitytracker.com/id?1020273
🔗 http://www.vupen.com/english/advisories/2008/1806
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/43004
🔗 http://secunia.com/advisories/30652
🔗 http://sunsolve.sun.com/search/document.do?assetkey=1-26-238416-1

関連する脆弱性情報

CVE-2020-247869.8

An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSe...

CVE-2016-15249.6

Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers ...

CVE-2009-01699.0

Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by cre...

CVE-2009-25977.8

The Sun Java System (SJS) Access Manager Policy Agent module 2.2 for SJS Web Proxy Server 4.0 allows remote attackers to cause a d...