VULNERABILITY INTELLIGENCE
CVE-2008-1995
CVSS score7.5 HIGH
EPSS probability2.18%
CISA KEVNot currently listed
Published2008-04-28
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Sun Java System Directory Proxy Server 6.0, 6.1, and 6.2 classifies a connection using the "bind-dn" criteria, which can cause an incorrect application of policy and allows remote attackers to bypass intended access restrictions for the server.