How severe is CVE-2007-0482?

CVE-2007-0482 has a CVSS 2.0 base score of 4.6, rated medium severity.

Is CVE-2007-0482 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (27th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-0482?

CVE-2007-0482 primarily affects Sun Ray Server Software. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2007-0482?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2007-0482 published?

CVE-2007-0482 was published on 2007-01-25 and last updated on 2026-06-16.

CVE-2007-0482

CVE-2007-0482 is a medium-severity vulnerability in Sun Ray Server Software with a CVSS 2.0 base score of 4.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 4.6)
EPSS exploit prediction: 0% (27th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Sun Ray Server Software
Published: 2007-01-25
Last modified: 2026-06-16

Description

cgi-bin/main in Sun Ray Server Software 2.0 and 3.0 before 20070123 allows local users to obtain the utadmin password by reading a web server's log file, or by conducting a different, unspecified local attack.

Frequently asked questions

What is CVE-2007-0482?: cgi-bin/main in Sun Ray Server Software 2.0 and 3.0 before 20070123 allows local users to obtain the utadmin password by reading a web server's log file, or by conducting a different, unspecified local attack.
How severe is CVE-2007-0482?: CVE-2007-0482 has a CVSS 2.0 base score of 4.6, rated medium severity.
Is CVE-2007-0482 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (27th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2007-0482?: CVE-2007-0482 primarily affects Sun Ray Server Software. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2007-0482?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2007-0482 published?: CVE-2007-0482 was published on 2007-01-25 and last updated on 2026-06-16.

References

Affected products (2)

cpe:2.3:a:sun:ray_server_software:2.0:*:*:*:*:*:*:*
cpe:2.3:a:sun:ray_server_software:3.0:*:*:*:*:*:*:*

More vulnerabilities in Sun Ray Server Software

CVE-2009-4294 — Critical (CVSS 10.0): Unspecified vulnerability in the Authentication Manager (aka utauthd) in Sun Ray Server Software 4.0 and 4.1 allows…
CVE-2008-2112 — High (CVSS 8.5): Unspecified vulnerability in Sun Ray Kiosk Mode 4.0 allows local and remote authenticated Sun Ray administrators to…
CVE-2009-4295 — High (CVSS 7.8): Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g,…
CVE-2007-6482 — High (CVSS 7.8): Unspecified vulnerability in the Device Manager daemon (utdevmgrd) in Sun Ray Server Software 2.0, 3.0, 3.1, and 3.1.1…
CVE-2008-5422 — High (CVSS 7.5): Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to…
CVE-2002-2036 — High (CVSS 7.5): Sun Ray Server Software (SRSS) 1.3, when Non-Smartcard Mobility (NSCM) is enabled, allows remote attackers to login as…

All CVEs affecting Sun Ray Server Software →