vulnwire
5.0med

CVE-2008-5341

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update…

Published 17 y ago · modified 4 mo ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.0%
percentile 87%
Public exploits
0
none known

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.

Exploit prediction (EPSS)

3.01% probability of exploitation in the next 30 days, higher than 87% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

Classification

Weakness
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

  • marc.info /?l=bugtraq&m=126583436323697&w=2 · vendor-advisory, x_refsource_HP, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2009-04/msg00004.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • vupen.com /english/advisories/2009/0672 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/34447 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • rhn.redhat.com /errata/RHSA-2008-1018.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • secunia.com /advisories/33015 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • support.avaya.com /elmodocs2/security/ASA-2009-012.htm · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/34233 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • security.gentoo.org /glsa/glsa-200911-02.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • www116.nortel.com /pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf · x_refsource_CONFIRM, x_transferred
  • support.avaya.com /elmodocs2/security/ASA-2008-486.htm · x_refsource_CONFIRM, x_transferred
  • redhat.com /support/errata/RHSA-2009-0369.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2009-01/msg00009.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • marc.info /?l=bugtraq&m=123678756409861&w=2 · vendor-advisory, x_refsource_HP, x_transferred
  • secunia.com /advisories/38539 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • rhn.redhat.com /errata/RHSA-2008-1025.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • vupen.com /english/advisories/2008/3339 · vdb-entry, x_refsource_VUPEN, x_transferred
  • redhat.com /support/errata/RHSA-2009-0016.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • us-cert.gov /cas/techalerts/TA08-340A.html · third-party-advisory, x_refsource_CERT, x_transferred
  • support.nortel.com /go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid= · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/34605 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/32991 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6529 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • sunsolve.sun.com /search/document.do?assetkey=1-26-244988-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
  • secunia.com /advisories/37386 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/33710 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.