CVEvulnerability
CVE-2009-1084
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-03-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying this object.
Affected configurations
• sun java system identity manager 7.0
• sun java system identity manager 7.1
• sun java system identity manager 7.1.1
• sun java system identity manager 8.0
Related
Weakness · not in database (1)
References
- http://blogs.sun.com/security/entry/sun_alert_253267_sun_java Patch
- http://secunia.com/advisories/34380 Vendor Advisory
- http://securitytracker.com/id?1021881 securitytracker.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1 Patch
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1 Patch
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/34191 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/0797 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49607 exchange.xforce.ibmcloud.com
- http://blogs.sun.com/security/entry/sun_alert_253267_sun_java Patch
- http://secunia.com/advisories/34380 Vendor Advisory
- http://securitytracker.com/id?1021881 securitytracker.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1 Patch
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1 Patch
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/34191 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/0797 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49607 exchange.xforce.ibmcloud.com