PT-2009-2854 · Sun · Sun Java System Access Manager

Publicado 2009-01-16 · Atualizado 2018-10-30 · CVE-2009-0170

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun Java System Access Manager versions 6.3 2005Q1 through 7.1

Description The issue allows remote authenticated users with console privileges to discover passwords and obtain access to other resources by visiting the Configuration Items component in the console.

Recommendations For versions 6.3 2005Q1 through 7.1, restrict access to the Configuration Items component in the console to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

CWE-255

Identificadores relacionados

CVE-2009-0170

Produtos afetados

Sun Java System Access Manager

Referências · 7

• http://vupen.com/english/advisories/2009/0156 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1 · Aviso do Fabricante
• http://securitytracker.com/id?1021605 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47942 · Nota
• http://securityfocus.com/bid/33265 · Correção
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-242166-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-0170 · Nota de Segurança