CVE-2007-1526 — Sun Java System Web Server 6.1 before 20070314 allows remote authenticated users with revoked client certificates to bypass the Certificate Revocation List (CRL) authorization control and access secure web server instances running under an account different from that used for the admin server via unspecified vectors

Back Back to CVE browser

MEDIUM

Sun Java System Web Server 6.1 before 20070314 allows remote authenticated users with revoked client certificates to bypass the Certificate Revocation List (CRL) authorization control and access secure web server instances running under an account different from that used for the admin server via unspecified vectors

Published Mar 20, 2007

6.0

MEDIUM

CVSS 2.0

EPSS 0.91%

Description

Sun Java System Web Server 6.1 before 20070314 allows remote authenticated users with revoked client certificates to bypass the Certificate Revocation List (CRL) authorization control and access secure web server instances running under an account different from that used for the admin server via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Metrics

0.91% 0.00908

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00908

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (15 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.91% (0.00908)	58.47th	v5 (v2026.06.15)
Jun 15, 2026	0.91% (0.00908)	55.08th	v5 (v2026.06.15)
Mar 17, 2025	0.18% (0.00179)	37.18th	v4 (v2025.03.14)
Dec 12, 2024	0.43% (0.00429)	75.28th	v3 (v2023.03.01)
Feb 22, 2024	0.43% (0.00429)	73.80th	v3 (v2023.03.01)
Jan 22, 2024	0.43% (0.00429)	71.80th	v3 (v2023.03.01)
Dec 15, 2023	0.45% (0.00446)	72.17th	v3 (v2023.03.01)
Nov 7, 2023	0.35% (0.00346)	68.58th	v3 (v2023.03.01)
Aug 22, 2023	0.26% (0.00264)	63.22th	v3 (v2023.03.01)
Mar 26, 2023	0.31% (0.00314)	65.56th	v3 (v2023.03.01)
Mar 7, 2023	0.29% (0.00290)	64.10th	v3 (v2023.03.01)
Mar 6, 2023	1.13% (0.01132)	56.11th	v2 (v2022.01.01)
Sep 22, 2022	1.13% (0.01132)	54.59th	v2 (v2022.01.01)
Apr 1, 2022	1.13% (0.01132)	52.58th	v2 (v2022.01.01)
Feb 4, 2022	1.13% (0.01132)	30.65th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (5)

http://osvdb.org/34074
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/24531
third-party-advisoryx_refsource_SECUNIA
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102822-1
vendor-advisoryx_refsource_SUNALERTPatchVendor Advisory
http://www.securitytracker.com/id?1017777
vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2007/0958
vdb-entryx_refsource_VUPEN

Link	Providers	Tags
http://osvdb.org/34074		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/24531		third-party-advisoryx_refsource_SECUNIA
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102822-1		vendor-advisoryx_refsource_SUNALERTPatchVendor Advisory
http://www.securitytracker.com/id?1017777		vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2007/0958		vdb-entryx_refsource_VUPEN

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 20, 2007

Updated Aug 7, 2024

Reserved Mar 20, 2007

Link CVE-2007-1526

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2007-1526

Red Hat

Severity n/a

Public date n/a

Links CVE-2007-1526