CVE-2008-5549

EUVD-2008-5524
Unspecified vulnerability in the Sun Java Web Console components in Sun Java System Portal Server 7.1 and 7.2 allows remote attackers to access local files and read the product's configuration information via unknown vectors related to "access to secure files by ThemeServlet."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 63%
Affected Products (NVD)
VendorProductVersion
sunjava_system_portal_server
7.1
sunjava_system_portal_server
7.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/33120
http://securitytracker.com/id?1021380
http://sunsolve.sun.com/search/document.do?assetkey=1-21-124301-12-1
http://sunsolve.sun.com/search/document.do?assetkey=1-21-138686-01-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-243886-1
http://www.securityfocus.com/bid/32770
http://www.vupen.com/english/advisories/2008/3408
https://exchange.xforce.ibmcloud.com/vulnerabilities/47256
http://secunia.com/advisories/33120
http://securitytracker.com/id?1021380
http://sunsolve.sun.com/search/document.do?assetkey=1-21-124301-12-1
http://sunsolve.sun.com/search/document.do?assetkey=1-21-138686-01-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-243886-1
http://www.securityfocus.com/bid/32770
http://www.vupen.com/english/advisories/2008/3408
https://exchange.xforce.ibmcloud.com/vulnerabilities/47256