CVE-2007-4511: Medium severity Sun ONE Application Server vulnerability
The Sun Admin Console in Sun Application Server 9.00.1 does not apply certain configuration changes persistently, which causes the (1) SSL and (2) SSLMutualAuth ORB listener services to enable all protocols and ciphers after the services are restarted, possibly allowing remote attackers to bypass intended policy.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4511?
CVE-2007-4511 is considered medium severity due to its potential to allow remote attackers to bypass SSL security settings.
How do I fix CVE-2007-4511?
To fix CVE-2007-4511, ensure that configuration changes for SSL and SSL_MutualAuth ORB listener services are applied properly and persistently, following best practices for secure application server configurations.
What systems are affected by CVE-2007-4511?
CVE-2007-4511 affects Sun Java System Application Server version 9.0_0.1.
What are the risks associated with CVE-2007-4511?
The risks associated with CVE-2007-4511 include the potential for remote attackers to exploit improper SSL configurations, leading to unauthorized data access.
Is there a workaround for CVE-2007-4511 without applying a patch?
A potential workaround for CVE-2007-4511 includes manually verifying and enforcing SSL protocol and cipher settings after every service restart.