CVE-2007-5152 : Sun Java System Access Manager 7.1, when installed in a Sun Java System Applicat

Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 9.1 container, does not demand authentication after a container restart, which allows remote attackers to perform administrative tasks.

Published 2007-10-01 05:17:00

Updated 2017-07-29 01:33:26

Source MITRE

View at NVD, CVE.org

Vulnerability category: BypassGain privilege

Products affected by CVE-2007-5152

SUN » Java System Application Server » Version: 9.1
cpe:2.3:a:sun:java_system_application_server:9.1:*:*:*:*:*:*:*
Matching versions
SUN » Java System Access Manager » Version: 7.1 Solaris X86 Edition
cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_x86:*:*:*:*:*
Matching versions
SUN » Java System Access Manager » Version: 7.1 Windows Edition
cpe:2.3:a:sun:java_system_access_manager:7.1:*:windows:*:*:*:*:*
Matching versions
SUN » Java System Access Manager » Version: 7.1 Linux Edition
cpe:2.3:a:sun:java_system_access_manager:7.1:*:linux:*:*:*:*:*
Matching versions
SUN » Java System Access Manager » Version: 7.1 Solaris Sparc Edition
cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_sparc:*:*:*:*:*
Matching versions
SUN » Java System Access Manager » Version: 7.1 Hp-ux Edition
cpe:2.3:a:sun:java_system_access_manager:7.1:*:hp-ux:*:*:*:*:*
Matching versions

Threat overview for CVE-2007-5152

Top countries where our scanners detected CVE-2007-5152

Top open port discovered on systems with this issue 8080

IPs affected by CVE-2007-5152 149

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2007-5152!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2007-5152

EPSS FAQ

1.87%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 89 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-5152

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

CWE ids for CVE-2007-5152

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-5152