Unscored severity · published Dec 12, 2008
CVE-2008-5550
Open redirect vulnerability in console/faces/jsp/login/BeginLogin.jsp in Sun Java Web Console 3.0.2 through 3.0.5 and Solaris 10 allows remote attackers to redirect users to…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Open redirect vulnerability in console/faces/jsp/login/BeginLogin.jsp in Sun Java Web Console 3.0.2 through 3.0.5 and Solaris 10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the redirect_url parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JW
Java Web Console · Sun
3.0.2; 3.0.3; 3.0.4; 3.0.5 · source: NVD
SO
Solaris · Sun
10; 10 · source: NVD
SU
Sunos · Sun
5.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5550
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5550
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-21-125950-18-1
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-21-125952-18-1
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-21-136987-02-1
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-243786-1
Patch
http://www.securityfocus.com/bid/32771
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/47257
More from Java Web Console
–
CVE-2009-2283
Multiple cross-site scripting (XSS) vulnerabilities in the help jsp scripts in Sun Java Web Console 3.0.2 through 3.0.5, and Sun Java Web Console in Solaris 10, allow remote…
–
CVE-2008-1286
Unspecified vulnerability in Sun Java Web Console 3.0.2, 3.0.3, and 3.0.4 allows remote attackers to bypass intended access restrictions and determine the existence of files or…
–
CVE-2007-1681
Format string vulnerability in libwebconsole_services.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a denial of service (application crash),…