CVE-2007-1526: Medium severity sun Java System Web Server vulnerability

Published Mar 20, 2007

Updated

Sun Java System Web Server 6.1 before 20070314 allows remote authenticated users with revoked client certificates to bypass the Certificate Revocation List (CRL) authorization control and access secure web server instances running under an account different from that used for the admin server via unspecified vectors.

Affected Software

1 affected component

sun Java System Web Server=6.1

Remediation

Patch Available

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102822-1

Event History

Mar 20, 2007

CVE Published

08:19 PM

Mar 21, 2007

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1526?

CVE-2007-1526 is considered a moderate severity vulnerability due to its ability to allow unauthorized access to secure web server instances.

How do authorized users exploit CVE-2007-1526?

Authorized users can exploit CVE-2007-1526 by using revoked client certificates to bypass the Certificate Revocation List controls.

Which versions of Sun Java System Web Server are affected by CVE-2007-1526?

CVE-2007-1526 affects Sun Java System Web Server version 6.1 prior to 20070314.

What are the potential impacts of CVE-2007-1526?

The potential impacts of CVE-2007-1526 include unauthorized access to secure web server instances and compromise of sensitive data.

How can I mitigate CVE-2007-1526?

To mitigate CVE-2007-1526, update Sun Java System Web Server to version 6.1 or later than 20070314.