CVE-2009-1078
First published: Wed Mar 25 2009(Updated: )
Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the expected privilege requirements for (1) deleting audit policies and (2) modifying workflows, which allows remote authenticated users to have an unspecified impact.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sun Java System Identity Manager | =7.1.1 | |
| Sun Java System Identity Manager | =7.0 | |
| Sun Java System Identity Manager | =7.1 | |
| Sun Java System Identity Manager | =8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/34380
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1
- http://blogs.sun.com/security/entry/sun_alert_253267_sun_java
- http://www.securityfocus.com/bid/34191
- http://www.vupen.com/english/advisories/2009/0797
- http://securitytracker.com/id?1021881
Frequently Asked Questions
What is the severity of CVE-2009-1078?
CVE-2009-1078 has been identified as a moderate severity vulnerability due to its impact on privilege requirements.
How do I fix CVE-2009-1078?
To fix CVE-2009-1078, you should upgrade your Sun Java System Identity Manager to a patched version that addresses these privilege issues.
What systems are affected by CVE-2009-1078?
CVE-2009-1078 affects Sun Java System Identity Manager versions 7.0 through 8.0.
What impact does CVE-2009-1078 have on security?
CVE-2009-1078 allows remote authenticated users to delete audit policies and modify workflows without appropriate permissions, potentially compromising system integrity.
Is CVE-2009-1078 exploitable remotely?
Yes, CVE-2009-1078 can be exploited by remote authenticated users, allowing them to perform unauthorized actions.
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/remedy
- agent/softwarecombine
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/description
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- vendor/sun
- canonical/sun java system identity manager
- version/sun java system identity manager/7.1.1
- version/sun java system identity manager/7.0
- version/sun java system identity manager/7.1
- version/sun java system identity manager/8.0