PT-2009-5097 · Sun · Sun Java System Access Manager

Publicado 2009-08-07 · Atualizado 2009-08-15 · CVE-2009-2713

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sun Java System Access Manager versions 7.0 2005Q4 through 7.1

Description The issue concerns the CDCServlet component when Cross Domain Single Sign On (CDSSO) is enabled. It fails to ensure that policy advice is presented to the correct client, allowing remote attackers to obtain sensitive information.

Recommendations For Sun Java System Access Manager versions 7.0 2005Q4 through 7.1, consider disabling the CDCServlet component or CDSSO functionality until a fix is available to prevent sensitive information disclosure.

Correção

Identificadores relacionados

CVE-2009-2713

Produtos afetados

Sun Java System Access Manager

Referências · 7

• http://vupen.com/english/advisories/2009/2176 · Nota
• http://securityfocus.com/bid/35961 · Correção
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2009-2713 · Nota de Segurança
• http://secunia.com/advisories/36167 · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-255968-1 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2713 · Nota