CVE-2008-5116
Directory traversal vulnerability in idm/includes/helpServer.jsp in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to read arbitrary files in the filesystem of the IDM server via directory traversal sequences…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.03%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Directory traversal vulnerability in idm/includes/helpServer.jsp in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to read arbitrary files in the filesystem of the IDM server via directory traversal sequences in the ext parameter.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:C/I:N/A:N
- EPSS
- 4.03% probability · 90th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- sun/java system identity manager
- Source
- cve@mitre.org
References
- http://osvdb.org/49767
- http://secunia.com/advisories/32606Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1Patch, Vendor Advisory
- http://www.procheckup.com/Vulnerability_PR08-09.php
- http://www.securityfocus.com/archive/1/498487/100/0/threaded
- http://www.securityfocus.com/bid/32262Exploit
- http://www.securitytracker.com/id?1021170
- http://www.vupen.com/english/advisories/2008/3128Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46554
- http://osvdb.org/49767
- http://secunia.com/advisories/32606Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1Patch, Vendor Advisory
- http://www.procheckup.com/Vulnerability_PR08-09.php
- http://www.securityfocus.com/archive/1/498487/100/0/threaded
- http://www.securityfocus.com/bid/32262Exploit
- http://www.securitytracker.com/id?1021170
- http://www.vupen.com/english/advisories/2008/3128Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46554
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.