VULNERABILITY INTELLIGENCE

CVE-2009-2856

CVSS score3.5 LOW
EPSS probability1.32%
CISA KEVNot currently listed
Published2009-08-18
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:P/I:N/A:N

Description

Sun Virtual Desktop Infrastructure (VDI) 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection, which might allow remote attackers to read cleartext VDI configuration-data requests by sniffing LDAP sessions on the network.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references