VulnerabilityModified
CVE-2009-0170
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console.
MEDIUM 6.0EPSS 1.67%
Does this matter?
Lower severity and a low EPSS score (1.67%). Track it; it rarely justifies an emergency change on its own.
Description
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console.
- CVSS 2.0
- 6.0 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:P
- EPSS
- 1.67% probability · 75th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-255, CWE-264
- Affected
- sun/java system access manager
- Source
- cve@mitre.org
References
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1Patch, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-242166-1Patch, Vendor Advisory
- http://www.securityfocus.com/bid/33265Patch
- http://www.securitytracker.com/id?1021605
- http://www.vupen.com/english/advisories/2009/0156
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47942
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1Patch, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-242166-1Patch, Vendor Advisory
- http://www.securityfocus.com/bid/33265Patch
- http://www.securitytracker.com/id?1021605
- http://www.vupen.com/english/advisories/2009/0156
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47942
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.