CVE-2009-2489: Sun Ray Server Software

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in the utdmsession program in Sun Ray Server Software (SRSS) 4.0 allows local users to access the sessions of arbitrary users via unknown vectors.

Affected products

• Sun Ray Server Software: version 4.0 only

Published 2009-07-16. Last modified 2026-06-16.