CVE-2007-5152: High severity Oracle Access Manager vulnerability
Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 9.1 container, does not demand authentication after a container restart, which allows remote attackers to perform administrative tasks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5152?
CVE-2007-5152 is considered to have a medium severity due to the potential for unauthorized administrative access.
How do I fix CVE-2007-5152?
To fix CVE-2007-5152, ensure that authentication is properly enforced after a container restart by applying any relevant patches or updates to Sun Java System Access Manager.
What products are affected by CVE-2007-5152?
CVE-2007-5152 affects Sun Java System Access Manager 7.1 and Sun Java System Application Server 9.1.
Can CVE-2007-5152 be exploited remotely?
Yes, CVE-2007-5152 can be exploited remotely without authentication after a server restart.
What impact does CVE-2007-5152 have on security?
CVE-2007-5152 can allow attackers to perform administrative tasks, potentially compromising the entire system.