CVE-2008-2705

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-06-16 · updated 2026-06-16
Weakness: CWE-287

Description

Unspecified vulnerability in Sun Java System Access Manager (AM) 7.1, when used with certain versions and configurations of Sun Directory Server Enterprise Edition (DSEE), allows remote attackers to bypass authentication via unspecified vectors.

Affected products

Sun Java System Access Manager: 7.1

References

http://secunia.com/advisories/30652
http://sunsolve.sun.com/search/document.do?assetkey=1-26-238416-1
http://www.securityfocus.com/bid/29676
http://www.securitytracker.com/id?1020273
http://www.vupen.com/english/advisories/2008/1806
https://exchange.xforce.ibmcloud.com/vulnerabilities/43004
http://secunia.com/advisories/30652
http://sunsolve.sun.com/search/document.do?assetkey=1-26-238416-1
http://www.securityfocus.com/bid/29676
http://www.securitytracker.com/id?1020273
http://www.vupen.com/english/advisories/2008/1806
https://exchange.xforce.ibmcloud.com/vulnerabilities/43004

Get alerted when CVE-2008-2705 or the next vulnerability affects your stack