VULNERABILITY INTELLIGENCE
CVE-2009-1084
CVSS score6.4 MEDIUM
EPSS probability2.56%
CISA KEVNot currently listed
Published2009-03-25
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N
Description
Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying this object.
Primary references
- cve@mitre.org — Patch
- cve@mitre.org — Vendor Advisory
- cve@mitre.org
- cve@mitre.org — Patch
- cve@mitre.org — Patch
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org — Vendor Advisory
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Patch
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108