CVE-2009-1074: Medium severity Sun Java System Identity Manager vulnerability
Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to obtain sensitive information by sniffing the network, related to "ssl termination devices" and lack of support for relative URLs.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1074?
CVE-2009-1074 is classified as a medium severity vulnerability due to its potential for sensitive information exposure.
How do I fix CVE-2009-1074?
To mitigate CVE-2009-1074, it is recommended to enable SSL for all network communications involving the affected Sun Java System Identity Manager versions.
What versions are affected by CVE-2009-1074?
CVE-2009-1074 affects Sun Java System Identity Manager versions 7.0 through 8.0.
What types of sensitive information are at risk with CVE-2009-1074?
CVE-2009-1074 exposes sensitive information such as user credentials and personal data since SSL is not used in all circumstances.
Can CVE-2009-1074 lead to remote attacks?
Yes, CVE-2009-1074 can facilitate remote attacks by allowing attackers to sniff the network and capture unprotected data.