CVE-2009-1082

Sun Java System Identity Manager (IdM) 7.0 through 8.0 allows remote authenticated users to gain privileges by submitting crafted commands to the Admin Console, as demonstrated by privileges for account creation and other administrative capabilities, related to the saveNoValidate action and saveNoValidateAllowedFormsAndWorkflows IDs.

CVSS v2.0 9.0 HIGH

9.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability : 8.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1	Patch
http://blogs.sun.com/security/entry/sun_alert_253267_sun_java	Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1
http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1	Patch
http://securitytracker.com/id?1021881
http://secunia.com/advisories/34380	Vendor Advisory
http://www.securityfocus.com/bid/34191	Patch
http://www.vupen.com/english/advisories/2009/0797	Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1	Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1	Vendor Advisory

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:sun:java_system_identity_manager:7.0:::::::*
	cpe:2.3:a:sun:java_system_identity_manager:7.1.1:::::::*
	cpe:2.3:a:sun:java_system_identity_manager:7.1:::::::*
	cpe:2.3:a:sun:java_system_identity_manager:8.0:::::::*

Information

Published : 2009-03-25 08:30

Updated : 2009-03-25 08:30

NVD link : CVE-2009-1082

Mitre link : CVE-2009-1082

JSON object : View

CWE

CWE-20

Improper Input Validation

Advertisement

Products Affected

sun

java_system_identity_manager

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1", "name": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1", "tags": ["Patch"], "refsource": "CONFIRM"}, {"url": "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java", "name": "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1", "name": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1", "tags": [], "refsource": "CONFIRM"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1", "name": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1", "tags": ["Patch"], "refsource": "CONFIRM"}, {"url": "http://securitytracker.com/id?1021881", "name": "1021881", "tags": [], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/34380", "name": "34380", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.securityfocus.com/bid/34191", "name": "34191", "tags": ["Patch"], "refsource": "BID"}, {"url": "http://www.vupen.com/english/advisories/2009/0797", "name": "ADV-2009-0797", "tags": ["Vendor Advisory"], "refsource": "VUPEN"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1", "name": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1", "tags": ["Patch"], "refsource": "CONFIRM"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1", "name": "253267", "tags": ["Vendor Advisory"], "refsource": "SUNALERT"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Sun Java System Identity Manager (IdM) 7.0 through 8.0 allows remote authenticated users to gain privileges by submitting crafted commands to the Admin Console, as demonstrated by privileges for account creation and other administrative capabilities, related to the saveNoValidate action and saveNoValidateAllowedFormsAndWorkflows IDs."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-20"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2009-1082", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": true, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2009-03-25T15:30Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2009-03-25T15:30Z"}