CVE-2009-2713

EPSS 1.71%
Veröffentlicht 07.08.2009 19:00:01
Zuletzt bearbeitet 16.06.2026 23:10:05
Erkennungen
Login

The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO) is enabled, does not ensure that "policy advice" is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

NVD 31 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Sun ≫ Java System Access Manager Version 6.3_2005q1 Edition solaris_10_sparc

Sun ≫ Java System Access Manager Version 6.3_2005q1 Edition solaris_8_sparc

Sun ≫ Java System Access Manager Version 6.3_2005q1 Edition solaris_9_sparc

Sun ≫ Java System Access Manager Version 7.1 Edition solaris_10_sparc

Sun ≫ Java System Access Manager Version 7.1 Edition solaris_8_sparc

Sun ≫ Java System Access Manager Version 7.1 Edition solaris_9_sparc

Sun ≫ Java System Access Manager Version 7_2005q4 Edition solaris_10_sparc

Sun ≫ Java System Access Manager Version 7_2005q4 Edition solaris_8_sparc

Sun ≫ Java System Access Manager Version 7_2005q4 Edition solaris_9_sparc

Sun ≫ Java System Access Manager Version 6.3_2005q1 Edition solaris_10_x86

Sun ≫ Java System Access Manager Version 6.3_2005q1 Edition solaris_8_x86

Sun ≫ Java System Access Manager Version 6.3_2005q1 Edition solaris_9_x86

Sun ≫ Java System Access Manager Version 7.1 Edition solaris_10_x86

Sun ≫ Java System Access Manager Version 7.1 Edition solaris_8_x86

Sun ≫ Java System Access Manager Version 7.1 Edition solaris_9_x86

Sun ≫ Java System Access Manager Version 7_2005q4 Edition solaris_10_x86

Sun ≫ Java System Access Manager Version 7_2005q4 Edition solaris_8_x86

Sun ≫ Java System Access Manager Version 7_2005q4 Edition solaris_9_x86

Sun ≫ Java System Access Manager Version 6.3_2005q1 Edition solaris_10_linux

Sun ≫ Java System Access Manager Version 6.3_2005q1 Edition solaris_8_linux

Sun ≫ Java System Access Manager Version 6.3_2005q1 Edition solaris_9_linux

Sun ≫ Java System Access Manager Version 7.1 Edition solaris_10_linux

Sun ≫ Java System Access Manager Version 7.1 Edition solaris_8_linux

Sun ≫ Java System Access Manager Version 7.1 Edition solaris_9_linux

Sun ≫ Java System Access Manager Version 7_2005q4 Edition solaris_10_linux

Sun ≫ Java System Access Manager Version 7_2005q4 Edition solaris_8_linux

Sun ≫ Java System Access Manager Version 7_2005q4 Edition solaris_9_linux

Sun ≫ Java System Access Manager Version 7.0_2005q4 Edition windows

Sun ≫ Java System Access Manager Version 7.1 Edition windows

Sun ≫ Java System Web Server Version 7.0 Edition hp_ux

Sun ≫ Java System Access Manager Version 7.1 Edition war

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.71%	0.744

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1

Patch

http://secunia.com/advisories/36167

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-66-255968-1

Vendor Advisory

http://www.securityfocus.com/bid/35961

Patch

http://www.vupen.com/english/advisories/2009/2176

https://nvd.nist.gov/vuln/detail/CVE-2009-2713

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-2713

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-2713

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2009-2713