CVE-2010-0066: Undefined Security Weakness

Unspecified vulnerability in the Access Manager Identity Server component in Oracle Application Server 7.0.4.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors...

Sun Java System Access Manager Version Detection

This script detects the installed version of Access Manager and sets the version in KB. OpenVAS Vulnerability Test $Id: secpodsjsaccessmanagerdetect.nasl 7076 2017-09-07 11:53:47Z teissa $ Sun Java System Access Manager Version Detection Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

Sun Java System Access Manager Information Disclosure vulnerability

The host is running Java System Access Manager and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodsjsaccessmanagerinfodiscvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ Sun Java System Access Manager Information Disclosure vulnerability Authors: Sharath S...

Sun JS Access Manager And OpenSSO Information Disclosure vulnerability

The host is running Access Manager or OpenSSO and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodsjsamnopenssoinfodiscvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ Sun JS Access Manager And OpenSSO Information Disclosure vulnerability Authors: Sharath S...

Sun Java System Access Manager Information Disclosure vulnerability

Java System Access Manager is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun JS Access Manager And OpenSSO Information Disclosure vulnerability

Access Manager or OpenSSO is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun Java System Access Manager Version Detection

This script detects the installed version of Access Manager. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun Java System Access Manager 7.1 < Patch 3 Multiple Vulnerabilities

Binary data 5133.prm...

Sun Java System Access Manager 7.1 < Patch 2 Multiple Vulnerabilities

Binary data 5132.prm...

CVE-2009-2713

The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On CDSSO is enabled, does not ensure that "policy advice" is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors...

Cross site scripting

The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On CDSSO is enabled, does not ensure that "policy advice" is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors...

Code injection

Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7.1; and OpenSSO Enterprise 8.0; when AMConfig.properties enables the debug flag, allows local users to discover cleartext passwords by reading debug files...

CVE-2009-2712

Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7.1; and OpenSSO Enterprise 8.0; when AMConfig.properties enables the debug flag, allows local users to discover cleartext passwords by reading debug files...

CVE-2009-2713

Sun Java System Access Manager 7.0 (2005Q4) and 7.1 with Cross Domain Single Sign On enabled is affected by CVE-2009-2713. The issue is that the CDCServlet component does not ensure policy advice is presented to the correct client, enabling potential information disclosure via unspecified vectors...

CVE-2009-2712

CVE-2009-2712 affects Sun Java System Access Manager (6.3/2005Q1, 7.0/2005Q4, 7.1) and OpenSSO/OpenSSO Enterprise 8.0. When AMConfig.properties enables the debug flag, local users can read debug files and discover cleartext passwords (information disclosure; confidentiality impact). Patch referen...

CVE-2009-2712: Undefined Security Weakness

Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7.1; and OpenSSO Enterprise 8.0; when AMConfig.properties enables the debug flag, allows local users to discover cleartext passwords by reading debug files...

CVE-2009-2713: Undefined Security Weakness

The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On CDSSO is enabled, does not ensure that "policy advice" is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2009-2597

The Sun Java System SJS Access Manager Policy Agent module 2.2 for SJS Web Proxy Server 4.0 allows remote attackers to cause a denial of service daemon crash via a GET request...

CVE-2009-2597

The CVE-2009-2597 entry concerns Sun Java System Web Proxy Server (SJS Web Proxy Server) with the Policy Agent module 2.2. It describes a remote DoS condition where a crafted GET request can trigger a daemon crash, affecting the server. The affected context explicitly notes SJS Web Proxy Server 4...

CVE-2009-2597

The Sun Java System SJS Access Manager Policy Agent module 2.2 for SJS Web Proxy Server 4.0 allows remote attackers to cause a denial of service daemon crash via a GET request...