{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Sun Java System Web Server 6.0 ;",
      "product": {
        "name": "Web",
        "vendor": {
          "name": "Centreon",
          "scada": false
        }
      }
    },
    {
      "description": "Sun Java System Web Server 6.1.",
      "product": {
        "name": "Web",
        "vendor": {
          "name": "Centreon",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nLa premi\u00e8re vuln\u00e9rabilit\u00e9 pr\u00e9sente dans Sun Java System Web Server 6.1\npermet \u00e0 une personne malveillante d\u0027acc\u00e9der au serveur web malgr\u00e8s un\ncertificat r\u00e9voqu\u00e9.\n\nUne seconde vuln\u00e9rabilit\u00e9 permet \u00e0 un individu malintentionn\u00e9 de porter\natteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es pr\u00e9sentes sur le syst\u00e8me au\nmoyen d\u0027une adresse r\u00e9ticulaire (URL) sp\u00e9cialement contruite.\n\n## Solution\n\nSe r\u00e9f\u00e9rer aux bulletins de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2007-03-15T00:00:00",
  "last_revision_date": "2007-03-16T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Sun #102833 du 15 mars 2007 :",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102833-1"
    },
    {
      "title": "Site Internet de l\u0027\u00e9diteur :",
      "url": "http://www.sun.com/"
    }
  ],
  "reference": "CERTA-2007-AVI-126",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-03-15T00:00:00.000000"
    },
    {
      "description": "ajout d\u0027une vuln\u00e9rabilit\u00e9.",
      "revision_date": "2007-03-16T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Deux vuln\u00e9rabilit\u00e9s dans Sun Java System Web Server permettent \u00e0 un\nutilisateur malintentionn\u00e9 de contourner la politique de s\u00e9curit\u00e9 ou de\nporter atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans Sun Java System Web Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Sun #102822 du 14 mars 2007",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102822-1"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Sun #102823 du 15 mars 2007",
      "url": null
    }
  ]
}