PT-2008-6264 · Sun · Sun Java System Identity Manager

Published 2008-11-18 · Updated 2017-08-08 · CVE-2008-5118

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sun Java System Identity Manager versions 6.0 through 6.0 SP4 Sun Java System Identity Manager version 7.0 Sun Java System Identity Manager version 7.1

Description The issue allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via unspecified vectors, related to frame injection.

Recommendations For Sun Java System Identity Manager versions 6.0 through 6.0 SP4, update to a version outside of this range to mitigate the risk. For Sun Java System Identity Manager version 7.0, update to a version outside of this range to mitigate the risk. For Sun Java System Identity Manager version 7.1, update to a version outside of this range to mitigate the risk.

Fix

Related Identifiers

CVE-2008-5118

Affected Products

Sun Java System Identity Manager

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-5118 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1 · Vendor Advisory
• http://secunia.com/advisories/32606 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46555 · Note
• http://securityfocus.com/bid/32262 · Note
• http://securitytracker.com/id?1021170 · Note
• http://vupen.com/english/advisories/2008/3128 · Note
• http://osvdb.org/49769 · Note