CVE-2009-0169: Critical severity Sun Java System Access Manager vulnerability
Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0169?
CVE-2009-0169 is considered a critical vulnerability due to its potential to allow unauthorized privilege escalation.
How do I fix CVE-2009-0169?
To fix CVE-2009-0169, it is recommended to apply the latest security patches provided by Sun for Java System Access Manager 7.1.
Who is affected by CVE-2009-0169?
CVE-2009-0169 affects all installations of Sun Java System Access Manager 7.1 on Windows, Linux, and Solaris platforms.
What type of attack does CVE-2009-0169 enable?
CVE-2009-0169 enables remote authenticated sub-realm administrators to gain higher privileges in the root realm.
What can be compromised due to CVE-2009-0169?
CVE-2009-0169 can compromise the security of an organization's entire access management system by allowing unauthorized access to sensitive resources.