CVE-2009-2713

published 2009-08-07

CVE-2009-2713: The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO) is enabled, does not ensure that…

medium 4.3 CVSS 3.1

AV N AC M Au N C P I N A N

The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO) is enabled, does not ensure that "policy advice" is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
sun	java_system_access_manager	—	—
sun	java_system_access_manager	—	—
sun	java_system_access_manager	—	—
sun	java_system_access_manager	—	—
sun	java_system_web_server	—	—