Cross site request forgery (csrf)

2008-11-1800:30:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

85.6%

JSON

Cross-site request forgery (CSRF) vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to hijack the authentication of administrators for requests that update the password via idm/admin/changeself.jsp.

CPENameOperatorVersion
java_system_identity_managereq6.0 sp2
java_system_identity_managereq7.0
java_system_identity_managereq6.0 sp1
java_system_identity_managereq7.1
java_system_identity_managereq6.0 sp3
java_system_identity_managereq6.0 sp4
java_system_identity_managereq6.0

Name	Operator	Version
java_system_identity_manager	eq	6.0 sp2
java_system_identity_manager	eq	7.0
java_system_identity_manager	eq	6.0 sp1
java_system_identity_manager	eq	7.1
java_system_identity_manager	eq	6.0 sp3
java_system_identity_manager	eq	6.0 sp4
java_system_identity_manager	eq	6.0