CVE-2004-0701: Sun Ray Server Software

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access.

Affected products

• Sun Ray Server Software: version 1.3 only; version 2.0 only

Published 2004-07-27. Last modified 2026-06-16.