CVEvulnerability
CVE-2008-5115
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-11-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to hijack the authentication of administrators for requests that update the password via idm/admin/changeself.jsp.
Affected configurations
• sun java system identity manager 6.0
• sun java system identity manager 7.0
• sun java system identity manager 7.1
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://osvdb.org/49766 osvdb.org
- http://secunia.com/advisories/32606 Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1 Patch, Vendor Advisory
- http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr07-11 www.procheckup.com
- http://www.securityfocus.com/archive/1/498479/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32262 www.securityfocus.com
- http://www.securitytracker.com/id?1021170 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/3128 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46553 exchange.xforce.ibmcloud.com
- http://osvdb.org/49766 osvdb.org
- http://secunia.com/advisories/32606 Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1 Patch, Vendor Advisory
- http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr07-11 www.procheckup.com
- http://www.securityfocus.com/archive/1/498479/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32262 www.securityfocus.com
- http://www.securitytracker.com/id?1021170 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/3128 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46553 exchange.xforce.ibmcloud.com