CVE-2008-2402: Medium severity sun java application server vulnerability
The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read password hashes and configuration data via direct requests for unspecified documents.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2402?
CVE-2008-2402 is considered to be a medium severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-2008-2402?
To fix CVE-2008-2402, update Sun Java Active Server Pages to version 4.0.3 or later to ensure proper access controls.
What information is exposed by CVE-2008-2402?
CVE-2008-2402 exposes sensitive information such as password hashes and configuration data due to insufficient access control.
Which versions of Sun Java Active Server Pages are affected by CVE-2008-2402?
CVE-2008-2402 affects Sun Java Active Server Pages versions before 4.0.3, including 4.0 and earlier.
Can CVE-2008-2402 be exploited remotely?
Yes, CVE-2008-2402 can be exploited remotely by attackers to read sensitive documents through direct requests.