PT-2009-3663 · Sun · Sun Java System Identity Manager

Publicado 2009-03-25 · Atualizado 2017-08-17 · CVE-2009-1084

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sun Java System Identity Manager (IdM) versions 7.0 through 8.0

Description The issue is related to improper access restriction to the System Configuration object. This could allow remote authenticated administrators and possibly remote attackers to modify the object, potentially having an unspecified impact.

Recommendations For versions 7.0 through 8.0, restrict access to the System Configuration object to prevent unauthorized modifications. As a temporary workaround, consider limiting the privileges of remote authenticated administrators to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-1084

Produtos afetados

Sun Java System Identity Manager

Referências · 10

• http://secunia.com/advisories/34380 · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1 · Correção
• http://securityfocus.com/bid/34191 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49607 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1 · Correção
• http://securitytracker.com/id?1021881 · Nota
• http://blogs.sun.com/security/entry/sun_alert_253267_sun_java · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2009-1084 · Nota de Segurança
• http://vupen.com/english/advisories/2009/0797 · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1 · Aviso do Fabricante