Vulnerability in Sun Java System Identity Manager
CVE-2009-1084
Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying this object.
EPSS: 0.026 (83.5th percentile) — read the EPSS interpretation.
Affected products
- Sun Java_system_identity_manager — versions 7.0, 7.1, 7.1.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vendor-advisory, Patch, x_refsource_SUNALERT, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)