CVE-2008-5116

State: Published
Severity: Not scored
Published: Nov 18, 2008
Updated: Aug 7, 2024
Reserved: Nov 17, 2008

Description

Directory traversal vulnerability in idm/includes/helpServer.jsp in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to read arbitrary files in the filesystem of the IDM server via directory traversal sequences in the ext parameter.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

243386vendor-advisory
32606third-party-advisory
sun-jsim-unspecified-security-bypass(46554)vdb-entry
20081119 PR08-09: Unauthenticated File Retrieval on Sun Java System Identity Manager "ext" parametermailing-list
http://www.procheckup.com/Vulnerability_PR08-09.php
32262vdb-entry
ADV-2008-3128vdb-entry
1021170vdb-entry
49767vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.