CVE-2008-2705
Sun Java System Access Manager 7.1 - Unauthenticated Authentication Bypass
Title source: llmDescription
Unspecified vulnerability in Sun Java System Access Manager (AM) 7.1, when used with certain versions and configurations of Sun Directory Server Enterprise Edition (DSEE), allows remote attackers to bypass authentication via unspecified vectors.
References (6)
Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/43004
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/30652
Vendor Advisory vendor-advisory
x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-26-238416-1
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/29676
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1020273
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1806
Scores
EPSS
0.0035
EPSS Percentile
57.5%
Details
CWE
CWE-287
Status
published
Products (1)
sun/java_system_access_manager
7.1
Published
Jun 16, 2008
Tracked Since
Feb 18, 2026