CVEvulnerability
CVE-2008-5549
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-12-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
Unspecified vulnerability in the Sun Java Web Console components in Sun Java System Portal Server 7.1 and 7.2 allows remote attackers to access local files and read the product's configuration information via unknown vectors related to "access to secure files by ThemeServlet."
Affected configurations
• sun java system portal server 7.1
• sun java system portal server 7.2
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/33120 Vendor Advisory
- http://securitytracker.com/id?1021380 securitytracker.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-124301-12-1 Patch, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-138686-01-1 Patch, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243886-1 Vendor Advisory
- http://www.securityfocus.com/bid/32770 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/3408 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47256 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/33120 Vendor Advisory
- http://securitytracker.com/id?1021380 securitytracker.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-124301-12-1 Patch, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-138686-01-1 Patch, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243886-1 Vendor Advisory
- http://www.securityfocus.com/bid/32770 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/3408 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47256 exchange.xforce.ibmcloud.com