← Back

CVE-2009-4314

nvd nist
Published: Dec 14, 2009Modified: Apr 23, 2026

JSON object

Loading...
4.4
Vector
AV:L/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 3.4 / Impact: 6.4
Source: NVD

Description

Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking (AMGH) is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for physically proximate attackers to obtain access to a session by going to an unattended DTU device.

Affected (2)

Sun
1 product
Ray Server Software
Configuration A
2 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Sun
Ray Server Software
Version 4.1
Ray Server Software
Version 4.1
Running on/withPlatform Versions
Sun
Solaris
Version 10
Sun
Solaris
Version 10

Related CWEs

CWE-264
CWE-264

References (4)

Source: cve@mitre.org
Patch
Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.