CVE-2009-1082

Sun Java System Identity Manager (IdM) 7.0–8.0 is affected by a privilege-escalation issue where remote authenticated users can submit crafted commands to the Admin Console to gain administrative privileges (e.g., account creation) via the saveNoValidate and related saveNoValidateAllowedFormsAndW...

CVE-2009-1083

The CVE concerns Sun Java System Identity Manager (IdM) 7.0–8.0 on Linux, AIX, Solaris, and HP-UX, where the password handling allows certain control characters that enable a remote attacker to execute arbitrary commands via vectors involving resource adapters. This mode provides concrete details...