CVE-2009-1075

CWE-2553 documents3 sources
Severity
5.0MEDIUM
EPSS
0.6%
top 31.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SUN Java System Identity Manager
Timeline
PublishedMar 25
Latest updateMay 2

Description

Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the Forgot Password feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: blogs.sun.com ↗Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-jjp7-f4q7-42r7: Sun Java System Identity Manager (IdM) 7↗2022-05-02
▶
CVEList
CVE-2009-1075: Sun Java System Identity Manager (IdM) 7↗2009-03-25
▶