CVE-2009-1084

published 2009-03-25

CVE-2009-1084: Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated…

medium 6.4 CVSS 3.1

AV N AC L Au N C P I P A N

Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying this object.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
sun	java_system_identity_manager	—	—
sun	java_system_identity_manager	—	—
sun	java_system_identity_manager	—	—
sun	java_system_identity_manager	—	—

CWE-264