VulnerabilityModified
CVE-2008-1286
Unspecified vulnerability in Sun Java Web Console 3.0.2, 3.0.3, and 3.0.4 allows remote attackers to bypass intended access restrictions and determine the existence of files or directories via unknown vectors.
HIGH 7.8EPSS 2.62%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.62%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in Sun Java Web Console 3.0.2, 3.0.3, and 3.0.4 allows remote attackers to bypass intended access restrictions and determine the existence of files or directories via unknown vectors.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:C/I:N/A:N
- EPSS
- 2.62% probability · 85th percentile
- CISA KEV
- Not listed
- Affected
- sun/java web console
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/29290Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-231526-1Patch
- http://www.securityfocus.com/bid/28155Patch
- http://www.securitytracker.com/id?1019574
- http://www.vupen.com/english/advisories/2008/0806/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41069
- http://secunia.com/advisories/29290Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-231526-1Patch
- http://www.securityfocus.com/bid/28155Patch
- http://www.securitytracker.com/id?1019574
- http://www.vupen.com/english/advisories/2008/0806/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41069
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.