CVE-2008-4722 Auth bypass in n/a
Authenticated attackers can bypass restrictions to cause denial of service or access the host operating system in Sun ILOM.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2008-4722?
CVE-2008-4722 is a critical authentication bypass vulnerability in n/a, published on 23 Oct 2008. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Unspecified vulnerability in Sun Integrated Lights-Out Manager (ILOM) 2.0.1.5 through 2.0.4.26 allows remote authenticated users to (1) access the service processor (SP) and cause a denial of service (shutdown or reboot), or (2) access the host operating system and have an unspecified impact, via unknown vectors.
Weakness: CWE-287
Which versions are affected by CVE-2008-4722?
It affects 37 products.
Products include Sun Blade 6000 Modular System With Chassis, Sun Blade 6048 Modular System With Chassis, Sun Blade 8000 Modular System, Sun Blade 8000p Modular System, Sun Blade T6320 Server Module, Sun Blade X6220 With Server Module Software and 31 more.
How do I fix CVE-2008-4722?
No fix has been published for CVE-2008-4722 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2008-4722 being exploited?
There is no known exploitation of CVE-2008-4722 in the wild and no public exploit code.
Sources
Also known as GHSA-xhqg-f253-xfr4.