Access Restriction Flaw in Sun Java System Identity Manager by Sun Microsystems

CVE-2009-1084

Summary

The Sun Java System Identity Manager (IdM) versions 7.0 through 8.0 has a critical flaw in access control measures for the System Configuration object. This vulnerability permits remote authenticated administrators, and potentially unauthorized remote attackers, to modify this object. The impact of such modifications could lead to significant alterations in system settings or unauthorized access to sensitive information, thereby compromising the overall security of the identity management environment.

References