PT-2008-6260 · Sun · Sun Java System Identity Manager

Published 2008-11-18 · Updated 2017-08-08 · CVE-2008-5114

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sun Java System Identity Manager versions 6.0 through 6.0 SP4 Sun Java System Identity Manager version 7.0 Sun Java System Identity Manager version 7.1

Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting (XSS) attacks.

Recommendations For Sun Java System Identity Manager versions 6.0 through 6.0 SP4, update to a version that is not affected by this issue. For Sun Java System Identity Manager version 7.0, update to a version that is not affected by this issue. For Sun Java System Identity Manager version 7.1, update to a version that is not affected by this issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2008-5114

Affected Products

Sun Java System Identity Manager

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-5114 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1 · Vendor Advisory
• http://secunia.com/advisories/32606 · Vendor Advisory
• http://securityfocus.com/bid/32262 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46552 · Note
• http://securitytracker.com/id?1021170 · Note
• http://vupen.com/english/advisories/2008/3128 · Note
• http://osvdb.org/49765 · Note