CVE-2008-2402

The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 stores sensitive information under the web root with insufficient access control…

published June 4, 2008

CVSS
—
EPSS
11%
Percentile
96.0
In the wild
Unconfirmed
What it is

The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read password hashes and configuration data via direct requests for unspecified documents.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.11367 · 96.0th percentile
Published
2008-06-04T20:00Z
EPSS history
Timeline
  • 04 JUN 20:00Z
    The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 stores sensitive information under the web root with insufficient access control…
    cvelistv5