CVE-2009-2713
First published: Fri Aug 07 2009(Updated: )
The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO) is enabled, does not ensure that "policy advice" is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sun Java System Access Manager | =6.3_2005q1 | |
| Sun Java System Access Manager | =7.1 | |
| Sun Java System Access Manager | =7.1 | |
| Sun Java System Access Manager | =7_2005q4 | |
| Sun Java System Access Manager | =7.1 | |
| Sun Java System Access Manager | =6.3_2005q1 | |
| Sun Java System Access Manager | =6.3_2005q1 | |
| Sun Java System Access Manager | =7_2005q4 | |
| Sun Java System Access Manager | =7_2005q4 | |
| Sun Java System Access Manager | =6.3_2005q1 | |
| Sun Java System Access Manager | =6.3_2005q1 | |
| Sun Java System Access Manager | =7_2005q4 | |
| Sun Java System Access Manager | =7.1 | |
| Sun Java System Access Manager | =7_2005q4 | |
| Sun Java System Access Manager | =7.1 | |
| Sun Java System Access Manager | =6.3_2005q1 | |
| Sun Java System Access Manager | =7_2005q4 | |
| Sun Java System Access Manager | =7.1 | |
| Sun Java System Access Manager | =6.3_2005q1 | |
| Sun Java System Access Manager | =7_2005q4 | |
| Sun Java System Access Manager | =7_2005q4 | |
| Sun Java System Access Manager | =6.3_2005q1 | |
| Sun Java System Access Manager | =7.1 | |
| Sun Java System Access Manager | =7.1 | |
| Sun Java System Access Manager | =7.1 | |
| Sun Java System Access Manager | =6.3_2005q1 | |
| Sun Java System Access Manager | =7_2005q4 | |
| Sun Java System Access Manager | =7.1 | |
| Sun Java System Access Manager | =7.0_2005q4 | |
| Sun Java System Web Server | =7.0 | |
| Sun Java System Access Manager | =7.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/softwarecombine
- agent/type
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/references
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- vendor/sun
- canonical/sun java system access manager
- version/sun java system access manager/6.3_2005q1
- version/sun java system access manager/7.1
- version/sun java system access manager/7_2005q4
- version/sun java system access manager/7.0_2005q4
- canonical/sun java system web server
- version/sun java system web server/7.0