« Volver al listado

CVE-2008-4747

Estado: ModificadaBaja (2.1)—

Unspecified vulnerability in the search feature in Sun Java System LDAP JDK before 4.20 allows context-dependent attackers to obtain sensitive information via unknown attack vectors related to the LDAP JDK library.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

SUN — Java Access Manager

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-4747",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": true,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-10-27T20:00:01.647",
  "references": [
    {
      "url": "http://secunia.com/advisories/32327",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-242246-1",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/31905",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1021103",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/2916",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46074",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/32327",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-242246-1",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/31905",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1021103",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/2916",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46074",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in the search feature in Sun Java System LDAP JDK before 4.20 allows context-dependent attackers to obtain sensitive information via unknown attack vectors related to the LDAP JDK library."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en la característica de búsqueda de Sun Java System LDAP JDK anterior a v4.20; permite a atacantes dependientes del contexto obtener información sensible a través de vectores de ataque desconocidos relacionados con la biblioteca LDAP JDK."
    }
  ],
  "lastModified": "2026-06-16T22:58:26.150",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sun:java_system_ldap_jdk:*:unknown:linux:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B46CA181-A0B3-40FA-A5DE-166CE5162521",
              "versionEndIncluding": "4.19"
            },
            {
              "criteria": "cpe:2.3:a:sun:java_system_ldap_jdk:*:unknown:sparc:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "37EF57D7-1BB2-4E71-A787-6A9AFE34DF92",
              "versionEndIncluding": "4.19"
            },
            {
              "criteria": "cpe:2.3:a:sun:java_system_ldap_jdk:*:unknown:x86:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "13E65DCD-A796-4F50-A80F-8A5528598D7E",
              "versionEndIncluding": "4.19"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sun:java_access_manager:6:2005q1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B4B0ABF7-C898-4643-9A6B-7A58BC0003D8"
            },
            {
              "criteria": "cpe:2.3:a:sun:java_access_manager:7:2005q4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "116D1FC8-4360-400C-8F38-E9EE3F4F6480"
            },
            {
              "criteria": "cpe:2.3:a:sun:java_access_manager:7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CE2CCD34-D8C6-4C67-9BA2-9E4B0984EF1C"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}