CVE-2008-5118
First published: Tue Nov 18 2008(Updated: )
Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "frame injection."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sun Java System Identity Manager | =6.0-sp2 | |
| Sun Java System Identity Manager | =7.0 | |
| Sun Java System Identity Manager | =6.0-sp1 | |
| Sun Java System Identity Manager | =7.1 | |
| Sun Java System Identity Manager | =6.0-sp3 | |
| Sun Java System Identity Manager | =6.0-sp4 | |
| Sun Java System Identity Manager | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/32262
- http://secunia.com/advisories/32606
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1
- http://www.securitytracker.com/id?1021170
- http://www.vupen.com/english/advisories/2008/3128
- http://osvdb.org/49769
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46555
Frequently Asked Questions
What is the severity of CVE-2008-5118?
CVE-2008-5118 is considered a medium severity vulnerability as it allows remote attackers to inject frames leading to potential phishing attacks.
How do I fix CVE-2008-5118?
The recommended fix for CVE-2008-5118 is to upgrade to a version of Sun Java System Identity Manager that is not affected by this vulnerability.
What versions of Sun Java System Identity Manager are affected by CVE-2008-5118?
CVE-2008-5118 affects Sun Java System Identity Manager versions 6.0 through 6.0 SP4, 7.0, and 7.1.
What are the potential impacts of CVE-2008-5118?
CVE-2008-5118 can enable attackers to conduct phishing attacks, compromising sensitive user information.
Is CVE-2008-5118 a web vulnerability?
Yes, CVE-2008-5118 is a web vulnerability that involves frame injection from arbitrary websites.
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/tags
- agent/references
- agent/severity
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/sun
- canonical/sun java system identity manager
- version/sun java system identity manager/6.0-sp2
- version/sun java system identity manager/7.0
- version/sun java system identity manager/6.0-sp1
- version/sun java system identity manager/7.1
- version/sun java system identity manager/6.0-sp3
- version/sun java system identity manager/6.0-sp4
- version/sun java system identity manager/6.0