Unspecified vulnerability in Sun Java Web Console 3.0.2, 3.0.3, and 3.0.4 allows remote attackers to bypass intended access restrictions and determine the existence of files or directories via unknown vectors.

Oracle Java Web Console 3.1[_x86].
Date this patch was last updated by Sun : May/14/10

Sun Java Web Console 3.0.2_x86: Security fixes.
Date this patch was last updated by Sun : Jun/25/09

According to its version, the installation of Sun Java Web Console on the remote host may allow a local or remote unprivileged user to determine the existence of files or directories in access restricted directories, which could result in a loss of confidentiality.

Oracle Java Web Console 3.1.
Date this patch was last updated by Sun : May/14/10

ID	Name	Product	Family	Severity
107945	Solaris 10 (x86) : 125953-20	Nessus	Solaris Local Security Checks	high
31599	Solaris 8 (x86) : 136986-03	Nessus	Solaris Local Security Checks	high
31423	Sun Java Web Console < 3.0.5 Remote File Enumeration	Nessus	Web Servers	medium
27100	Solaris 9 (x86) : 125951-20	Nessus	Solaris Local Security Checks	high
27093	Solaris 9 (sparc) : 125950-20	Nessus	Solaris Local Security Checks	high

Detections

Analytics

CVE-2008-1286

high

Tenable Plugins

high

high

medium

high

high