CVE-2009-2713
First published: Fri Aug 07 2009(Updated: )
The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO) is enabled, does not ensure that "policy advice" is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Access Manager | =6.3_2005q1 | |
| Oracle Access Manager | =7.1 | |
| Oracle Access Manager | =7.1 | |
| Oracle Access Manager | =7_2005q4 | |
| Oracle Access Manager | =7.1 | |
| Oracle Access Manager | =6.3_2005q1 | |
| Oracle Access Manager | =6.3_2005q1 | |
| Oracle Access Manager | =7_2005q4 | |
| Oracle Access Manager | =7_2005q4 | |
| Oracle Access Manager | =6.3_2005q1 | |
| Oracle Access Manager | =6.3_2005q1 | |
| Oracle Access Manager | =7_2005q4 | |
| Oracle Access Manager | =7.1 | |
| Oracle Access Manager | =7_2005q4 | |
| Oracle Access Manager | =7.1 | |
| Oracle Access Manager | =6.3_2005q1 | |
| Oracle Access Manager | =7_2005q4 | |
| Oracle Access Manager | =7.1 | |
| Oracle Access Manager | =6.3_2005q1 | |
| Oracle Access Manager | =7_2005q4 | |
| Oracle Access Manager | =7_2005q4 | |
| Oracle Access Manager | =6.3_2005q1 | |
| Oracle Access Manager | =7.1 | |
| Oracle Access Manager | =7.1 | |
| Oracle Access Manager | =7.1 | |
| Oracle Access Manager | =6.3_2005q1 | |
| Oracle Access Manager | =7_2005q4 | |
| Oracle Access Manager | =7.1 | |
| Oracle Access Manager | =7.0_2005q4 | |
| Sun Java System Web Server | =7.0 | |
| Oracle Access Manager | =7.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2009-2713?
CVE-2009-2713 is considered to have a medium severity rating due to its potential to expose sensitive information.
How do I fix CVE-2009-2713?
To fix CVE-2009-2713, you should update to a version of Sun Java System Access Manager that is not affected by the vulnerability.
What causes CVE-2009-2713 vulnerability?
CVE-2009-2713 is caused by the CDCServlet component failing to ensure proper presentation of policy advice to the correct client when CDSSO is enabled.
Which versions of Sun Java System Access Manager are affected by CVE-2009-2713?
CVE-2009-2713 affects Sun Java System Access Manager versions 6.3 2005Q1, 7.0 2005Q4, and 7.1.
What type of attack can exploit CVE-2009-2713?
CVE-2009-2713 can be exploited by remote attackers to obtain sensitive information through unspecified vectors.
- agent/softwarecombine
- agent/type
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/references
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/sun
- canonical/oracle access manager
- version/oracle access manager/6.3_2005q1
- version/oracle access manager/7.1
- version/oracle access manager/7_2005q4
- version/oracle access manager/7.0_2005q4
- canonical/sun java system web server
- version/sun java system web server/7.0