Privilege Escalation Vulnerability in Sun Java System Identity Manager Products
CVE-2009-1078

Currently unrated

Key Information:

Vendor
Oracle
Status
Java System Identity Manager
Vendor
CVE Published:
25 March 2009

Summary

The Sun Java System Identity Manager versions 7.0 through 8.0 lack proper enforcement of privilege requirements, enabling remote authenticated users to delete audit policies and modify workflows. This oversight may lead to unauthorized actions within the application's environment, potentially affecting system integrity and security.

References

http://sunsolve.sun.com/search/document.do?assetkey=1-66-...
vendor-advisoryx_refsource_SUNALERT
http://securitytracker.com/id?1021881
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/34191
vdb-entryx_refsource_BID

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.