Unscored severity · published Mar 11, 2008
CVE-2008-1286
Unspecified vulnerability in Sun Java Web Console 3.0.2, 3.0.3, and 3.0.4 allows remote attackers to bypass intended access restrictions and determine the existence of files or…
–
CVSS
2.6%
EPSS
No
On KEV
Description
Unspecified vulnerability in Sun Java Web Console 3.0.2, 3.0.3, and 3.0.4 allows remote attackers to bypass intended access restrictions and determine the existence of files or directories via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JW
Java Web Console · Sun
3.0.2; 3.0.3; 3.0.4; 3.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1286
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1286
Vendor Advisory
http://secunia.com/advisories/29290
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-231526-1
Patch
http://www.securityfocus.com/bid/28155
www.securitytracker.com
http://www.securitytracker.com/id?1019574
www.vupen.com
http://www.vupen.com/english/advisories/2008/0806/references
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/41069
More from Java Web Console
–
CVE-2009-2283
Multiple cross-site scripting (XSS) vulnerabilities in the help jsp scripts in Sun Java Web Console 3.0.2 through 3.0.5, and Sun Java Web Console in Solaris 10, allow remote…
–
CVE-2008-5550
Open redirect vulnerability in console/faces/jsp/login/BeginLogin.jsp in Sun Java Web Console 3.0.2 through 3.0.5 and Solaris 10 allows remote attackers to redirect users to…
–
CVE-2007-1681
Format string vulnerability in libwebconsole_services.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a denial of service (application crash),…