CVE-2008-5549
First published: Fri Dec 12 2008(Updated: )
Unspecified vulnerability in the Sun Java Web Console components in Sun Java System Portal Server 7.1 and 7.2 allows remote attackers to access local files and read the product's configuration information via unknown vectors related to "access to secure files by ThemeServlet."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sun Java System Portal Server | =7.1 | |
| Sun Java System Portal Server | =7.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-124301-12-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243886-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-138686-01-1
- http://securitytracker.com/id?1021380
- http://secunia.com/advisories/33120
- http://www.securityfocus.com/bid/32770
- http://www.vupen.com/english/advisories/2008/3408
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47256
Frequently Asked Questions
What is the severity of CVE-2008-5549?
CVE-2008-5549 is categorized as a high-severity vulnerability due to its potential to allow unauthorized access to local files.
How do I fix CVE-2008-5549?
To fix CVE-2008-5549, it is recommended to upgrade to a later version of Sun Java System Portal Server that addresses this vulnerability.
What versions of Sun Java System Portal Server are affected by CVE-2008-5549?
CVE-2008-5549 affects Sun Java System Portal Server versions 7.1 and 7.2.
Can CVE-2008-5549 be exploited by remote attackers?
Yes, CVE-2008-5549 can be exploited by remote attackers to access secure files on the server.
What type of information can be exposed due to CVE-2008-5549?
CVE-2008-5549 allows attackers to potentially read the product's configuration information.
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-historical
- collector/nvd-index
- vendor/sun
- canonical/sun java system portal server
- version/sun java system portal server/7.1
- version/sun java system portal server/7.2