VULNERABILITY INTELLIGENCE

CVE-2008-5115

CVSS score6.8 MEDIUM
EPSS probability3.14%
CISA KEVNot currently listed
Published2008-11-18
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Cross-site request forgery (CSRF) vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to hijack the authentication of administrators for requests that update the password via idm/admin/changeself.jsp.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references