CVE-2009-1084

CWE-2643 documents3 sources
Severity
6.4MEDIUM
EPSS
0.9%
top 24.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SUN Java System Identity Manager
Timeline
PublishedMar 25
Latest updateMay 2

Description

Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying this object.

CVSS vector

AV:N/AC:L/C:P/I:P/A:NExploitability: 10.0 | Impact: 4.9

Affected Packages1 packages

Patches

Patch: blogs.sun.com ↗Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-6m5g-4p44-6rcf: Sun Java System Identity Manager (IdM) 7↗2022-05-02
▶
CVEList
CVE-2009-1084: Sun Java System Identity Manager (IdM) 7↗2009-03-25
▶