CVE-2009-4314 - Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking (AMGH) is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for physically proximate attackers to obtain access to a session by going to an unattended DTU device

Back Back to CVE browser

MEDIUM

Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking (AMGH) is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for physically proximate attackers to obtain access to a session by going to an unattended DTU device

Published Dec 14, 2009

4.4

MEDIUM

CVSS 2.0

EPSS 0.33%

Description

Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking (AMGH) is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for physically proximate attackers to obtain access to a session by going to an unattended DTU device.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (3)

http://sunsolve.sun.com/search/document.do?assetkey=1-21-139548-03-1
x_refsource_CONFIRMPatch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-268228-1
vendor-advisoryx_refsource_SUNALERTPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-4282
Advisory

Link	Providers	Tags
http://sunsolve.sun.com/search/document.do?assetkey=1-21-139548-03-1		x_refsource_CONFIRMPatch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-268228-1		vendor-advisoryx_refsource_SUNALERTPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-4282		Advisory