Vulnerability in Sun Ray Server Software

CVE-2004-0701

Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access.

EPSS: 0.003 (27.4th percentile) — read the EPSS interpretation.

Affected products

Sun Ray_server_software — versions 1.3, 2.0
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
cve@mitre.org (vendor-advisory, x_refsource_SUNALERT)