CVE-2009-1082: Input Validation
Sun Java System Identity Manager (IdM) 7.0 through 8.0 allows remote authenticated users to gain privileges by submitting crafted commands to the Admin Console, as demonstrated by privileges for account creation and other administrative capabilities, related to the saveNoValidate action and saveNoValidateAllowedFormsAndWorkflows IDs.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1082?
CVE-2009-1082 is rated as a high severity vulnerability due to the potential for remote authenticated users to gain elevated privileges.
How do I fix CVE-2009-1082?
To fix CVE-2009-1082, it is recommended to upgrade to a patched version of Sun Java System Identity Manager that addresses this vulnerability.
Which versions of Sun Java System Identity Manager are affected by CVE-2009-1082?
CVE-2009-1082 affects Sun Java System Identity Manager versions 7.0 through 8.0.
Can CVE-2009-1082 be exploited remotely?
Yes, CVE-2009-1082 can be exploited by remote authenticated users through crafted commands in the Admin Console.
What types of privileges can be gained through CVE-2009-1082?
CVE-2009-1082 allows attackers to gain administrative privileges, including account creation and other sensitive actions.