CVE-2009-1084: Medium severity Sun Java System Identity Manager vulnerability
Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying this object.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify Identity Manager access controls/ACLs so that the System Configuration object can only be viewed or modified by authorized/trusted administrator accounts; remove or tighten permissions for all other roles/accounts.
Sun Java System Identity Manager System Configuration object access = restrict to authorized/ trusted administrators only
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1084?
CVE-2009-1084 has a medium severity rating due to the potential for unauthorized modification of system configuration.
Who is affected by CVE-2009-1084?
CVE-2009-1084 affects users of Sun Java System Identity Manager versions 7.0 through 8.0.
How do I fix CVE-2009-1084?
To fix CVE-2009-1084, upgrade to the latest version of Sun Java System Identity Manager that addresses this vulnerability.
What type of attack does CVE-2009-1084 enable?
CVE-2009-1084 could allow remote authenticated administrators to modify system configuration settings, which may lead to further attacks.
Is CVE-2009-1084 exploitable without authentication?
No, CVE-2009-1084 requires remote authenticated access to exploit the vulnerability.