CVE-2008-5549
Last modified
CVE-2008-5549 is a vulnerability of currently unknown severity. Unspecified vulnerability in the Sun Java Web Console components in Sun Java System Portal Server 7.1 and 7.2 allows remote attackers to access local files and read the product's configuration information via unknown vectors related to "access to secure files by ThemeServlet.". EPSS estimates a 2.29% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in the Sun Java Web Console components in Sun Java System Portal Server 7.1 and 7.2 allows remote attackers to access local files and read the product's configuration information via unknown vectors related to "access to secure files by ThemeServlet."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sun | Java System Portal Server | 7.1 |
| Sun | Java System Portal Server | 7.2 |
References
- http://secunia.com/advisories/33120Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-124301-12-1Patch, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-138686-01-1Patch, Vendor Advisory
- http://secunia.com/advisories/33120Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-124301-12-1Patch, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-138686-01-1Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-5549?
How severe is CVE-2008-5549?
How do I fix CVE-2008-5549?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-5543Symantec AntiVirus (SAV) 10, when Internet Explorer 6 or 7 i…
- CVE-2008-5544Hacksoft The Hacker 6.3.1.2.174 and possibly 6.3.0.9.081, wh…
- CVE-2008-5545Trend Micro VSAPI 8.700.0.1004 in Trend Micro AntiVirus, whe…
- CVE-2008-5546VirusBlokAda VBA32 3.12.8.5, when Internet Explorer 6 or 7 i…
- CVE-2008-5547HAURI ViRobot 2008.12.4.1499 and possibly 2008.9.12.1375, wh…
- CVE-2008-5548VirusBuster 4.5.11.0, when Internet Explorer 6 or 7 is used,…
- CVE-2008-5550Open redirect vulnerability in console/faces/jsp/login/Begin…
- CVE-2008-5551The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 all…
- CVE-2008-5552The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 all…
- CVE-2008-5553The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 dis…
- CVE-2008-5554The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 doe…
- CVE-2008-5555Microsoft Internet Explorer 8.0 Beta 2 relies on the XDomain…
Are you affected by CVE-2008-5549?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
