CVE-2008-5341 Information disclosure in n/a

Medium 5.0 Published 5 Dec 2008 Updated 7 Aug 2024

Untrusted Java Web Start applications can disclose the JWS cache pathname and application username, requiring user interaction to launch the application.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2008-5341?

CVE-2008-5341 is a medium-severity vulnerability in Sun Jdk, published on 5 Dec 2008. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.

Weakness: CWE-200

Which versions are affected by CVE-2008-5341?

It affects 3 products.

Products include Sun Jdk, Sun Jre, Sun Sdk.

How do I fix CVE-2008-5341?

Upgrade to a fixed version.

Is CVE-2008-5341 being exploited?

There is no known exploitation of CVE-2008-5341 in the wild and no public exploit code.

All Sun Jdk vulnerabilities

Sources

Also known as GHSA-vwjg-vpwq-rxvv.