CVEvulnerability
CVE-2008-5117
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-11-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-20
Description
Open redirect vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected configurations
• sun java system identity manager 6.0
• sun java system identity manager 7.0
• sun java system identity manager 7.1
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://osvdb.org/49768 osvdb.org
- http://secunia.com/advisories/32606 Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/32262 www.securityfocus.com
- http://www.securitytracker.com/id?1021170 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/3128 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46556 exchange.xforce.ibmcloud.com
- http://osvdb.org/49768 osvdb.org
- http://secunia.com/advisories/32606 Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/32262 www.securityfocus.com
- http://www.securitytracker.com/id?1021170 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/3128 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46556 exchange.xforce.ibmcloud.com