CVE-2005-4046

Severity CVSS v4.0:

Pending analysis

Type:

Unavailable / Other

Publication date:

07/12/2005

Last modified:

03/04/2025

Description

Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server Enterprise Edition 8.1 2005Q1, and Sun ONE Application Server 7 Standard Edition, as used in multiple web servers, allows remote attackers to conduct man-in-the-middle (MITM) attacks and "compromise data privacy."

Impact

Vector 2.0

AV:N/AC:H/Au:N/C:P/I:P/A:N CVSS v2.0 Severity and Metrics:

Base Score: 4.00 MEDIUM
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N

Attack Vector (AV): Network
Attack Complexity (AC): High
Authentication (Au): None
Confidentiality (C): Physical
Integrity (I): Physical
Availability (A): None

Base Score 2.0

4.00

Severity 2.0

MEDIUM

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:a:sun:java_system_application_server:7.0:::::::*
cpe:2.3:a:sun:java_system_application_server:8.1::enterprise:::::
cpe:2.3:a:sun:one_application_server:7.0::standard:::::

To consult the complete list of CPE names with products and versions, see this page

CVE-2005-4046

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools