Lucene search

K
nvd[email protected]NVD:CVE-2009-0170
HistoryJan 16, 2009 - 9:30 p.m.

CVE-2009-0170

2009-01-1621:30:03
CWE-264
CWE-255
web.nvd.nist.gov

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

6.1 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.1%

Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other “access to resources,” by visiting the Configuration Items component in the console.

Affected configurations

NVD
Node
sunjava_system_access_managerMatch6.3
OR
sunjava_system_access_managerMatch7.0_2005q4
OR
sunjava_system_access_managerMatch7.1

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

6.1 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.1%

Related for NVD:CVE-2009-0170