CVE-2008-5422

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-12-11 · updated 2026-06-16
Weakness: CWE-264

Description

Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors.

Affected products

Sun Ray Server Software: 3.0, 3.1, 4.0, 3.1.1

References

http://secunia.com/advisories/33108
http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-240365-1
http://support.avaya.com/elmodocs2/security/ASA-2008-502.htm
http://www.securityfocus.com/bid/32769
http://www.securitytracker.com/id?1021383
http://www.vupen.com/english/advisories/2008/3406
https://exchange.xforce.ibmcloud.com/vulnerabilities/47253
http://secunia.com/advisories/33108
http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-240365-1
http://support.avaya.com/elmodocs2/security/ASA-2008-502.htm

Get alerted when CVE-2008-5422 or the next vulnerability affects your stack