CVE-2009-4314: Sun Ray Server Software

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking (AMGH) is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for physically proximate attackers to obtain access to a session by going to an unattended DTU device.

Affected products

• Sun Ray Server Software: version 4.1 only

Published 2009-12-14. Last modified 2026-06-16.