CVE Vulnerabilities

CVE-2009-1078

Published: Mar 25, 2009 | Modified: Oct 06, 2009
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the expected privilege requirements for (1) deleting audit policies and (2) modifying workflows, which allows remote authenticated users to have an unspecified impact.

Affected Software

Name Vendor Start Version End Version
Java_system_identity_manager Sun 7.1.1 7.1.1
Java_system_identity_manager Sun 7.0 7.0
Java_system_identity_manager Sun 7.1 7.1
Java_system_identity_manager Sun 8.0 8.0

References