First published: Fri Jul 23 2004(Updated: )
Sun Java System Portal Server 6.2 (formerly Sun ONE) allows remote authenticated users to obtain Calendar Server privileges and modify Calendar data by changing the display options to a non-default view.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Communications Calendar Server | =6.2 | |
Oracle Communications Calendar Server | =6.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-0742 is considered a moderate severity vulnerability due to its impact on user privileges and calendar data manipulation.
To mitigate CVE-2004-0742, update to the latest version of Sun Java System Portal Server or implement access controls to limit user permissions.
CVE-2004-0742 affects users of Sun Java System Portal Server 6.2 who have authenticated access.
CVE-2004-0742 enables an authenticated remote user to elevate privileges and modify calendar data inappropriately.
While CVE-2004-0742 was identified years ago, its relevance may persist for environments still using unsupported versions of the software.