CVE-2009-1078
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
66.2%
Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the expected privilege requirements for (1) deleting audit policies and (2) modifying workflows, which allows remote authenticated users to have an unspecified impact.
Affected configurations
References
blogs.sun.com/security/entry/sun_alert_253267_sun_java
secunia.com/advisories/34380
securitytracker.com/id?1021881
sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1
sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1
www.securityfocus.com/bid/34191
www.vupen.com/english/advisories/2009/0797
Related
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
66.2%