CVEvulnerability
CVE-2008-5116
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-11-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in idm/includes/helpServer.jsp in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to read arbitrary files in the filesystem of the IDM server via directory traversal sequences in the ext parameter.
Affected configurations
• sun java system identity manager 6.0
• sun java system identity manager 7.0
• sun java system identity manager 7.1
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://osvdb.org/49767 osvdb.org
- http://secunia.com/advisories/32606 Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1 Patch, Vendor Advisory
- http://www.procheckup.com/Vulnerability_PR08-09.php www.procheckup.com
- http://www.securityfocus.com/archive/1/498487/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32262 Exploit
- http://www.securitytracker.com/id?1021170 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/3128 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46554 exchange.xforce.ibmcloud.com
- http://osvdb.org/49767 osvdb.org
- http://secunia.com/advisories/32606 Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1 Patch, Vendor Advisory
- http://www.procheckup.com/Vulnerability_PR08-09.php www.procheckup.com
- http://www.securityfocus.com/archive/1/498487/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32262 Exploit
- http://www.securitytracker.com/id?1021170 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/3128 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46554 exchange.xforce.ibmcloud.com