CVE-2009-1074

Опубликовано: 25 мар. 2009

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to obtain sensitive information by sniffing the network, related to "ssl termination devices" and lack of support for relative URLs.

Ссылки

http://blogs.sun.com/security/entry/sun_alert_253267_sun_java
Patch
http://secunia.com/advisories/34380
Vendor Advisory
http://securitytracker.com/id?1021881
http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1
Patch
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1
Patch
Vendor Advisory
http://www.securityfocus.com/bid/34191
Exploit
Patch
http://www.vupen.com/english/advisories/2009/0797
Vendor Advisory
http://blogs.sun.com/security/entry/sun_alert_253267_sun_java
Patch
http://secunia.com/advisories/34380
Vendor Advisory
http://securitytracker.com/id?1021881
http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1
Patch
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1
Patch
Vendor Advisory
http://www.securityfocus.com/bid/34191
Exploit
Patch
http://www.vupen.com/english/advisories/2009/0797
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*

cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*

cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*

cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.0065

Низкий

5 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

GHSA-8252-5gjp-pfpg

github

почти 4 года назад