VULNERABILITY INTELLIGENCE

CVE-2009-3923

CVSS score7.5 HIGH
EPSS probability2.35%
CISA KEVNot currently listed
Published2009-11-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The VirtualBox 2.0.8 and 2.0.10 web service in Sun Virtual Desktop Infrastructure (VDI) 3.0 does not require authentication, which allows remote attackers to obtain unspecified access via vectors involving requests to an Apache HTTP Server.

Weakness classification

  • CWE-287: Improper Authentication

Primary references