CVE-2008-5422

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.58%

Published

Dec 11, 2008

Modified

Apr 22, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors.

Weaknesses (CWE)

CWE-264

Affected Products (18)

sun · ray_server_softwarevulnerable

sun · solaris

sun · ray_server_softwarevulnerable

sun · solaris

sun · ray_server_softwarevulnerable

novell · suse_linux_enterprise_server

redhat · enterprise_linux

sun · ray_server_softwarevulnerable

sun · java_desktop_system

novell · suse_linux_enterprise_server

redhat · enterprise_linux

References (16)

http://secunia.com/advisories/33108

http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1

PatchVendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-240365-1

PatchVendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2008-502.htm

http://www.securityfocus.com/bid/32769

Patch

http://www.securitytracker.com/id?1021383

http://www.vupen.com/english/advisories/2008/3406

https://exchange.xforce.ibmcloud.com/vulnerabilities/47253

http://secunia.com/advisories/33108

http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1

PatchVendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-240365-1

PatchVendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2008-502.htm

http://www.securityfocus.com/bid/32769

Patch

http://www.securitytracker.com/id?1021383

http://www.vupen.com/english/advisories/2008/3406

https://exchange.xforce.ibmcloud.com/vulnerabilities/47253

KEV Catalog EPSS Scores Vendors All CVEs