PT-2008-6263 · Sun · Sun Java System Identity Manager

Published 2008-11-18 · Updated 2017-08-08 · CVE-2008-5117

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun Java System Identity Manager versions 6.0 through 6.0 SP4 Sun Java System Identity Manager version 7.0 Sun Java System Identity Manager version 7.1

Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks.

Recommendations For Sun Java System Identity Manager versions 6.0 through 6.0 SP4, update to a version outside of this range to mitigate the risk. For Sun Java System Identity Manager version 7.0, update to a version outside of this range to mitigate the risk. For Sun Java System Identity Manager version 7.1, update to a version outside of this range to mitigate the risk.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-5117

Affected Products

Sun Java System Identity Manager

References · 8

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1 · Vendor Advisory
• http://secunia.com/advisories/32606 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-5117 · Security Note
• http://securityfocus.com/bid/32262 · Note
• http://securitytracker.com/id?1021170 · Note
• http://vupen.com/english/advisories/2008/3128 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46556 · Note
• http://osvdb.org/49768 · Note