Lucene search
HistoryJan 16, 2009 - 9:30 p.m.
CVE-2009-0169
cve-2009-0169
sun java system
access manager
privilege escalation
nvd
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.0%
Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm.
Affected configurations
Node
sunjava_system_access_managerMatch7.1linux
ORsunjava_system_access_managerMatch7.1solaris_sparc
ORsunjava_system_access_managerMatch7.1solaris_x86
ORsunjava_system_access_managerMatch7.1windows
| CPE | Name | Operator | Version |
|---|---|---|---|
| sun:java_system_access_manager | sun java system access manager | eq | 7.1 |
Related
prion
prion
Code injection
2009-01-16 21:30:00
cvelist
cvelist
CVE-2009-0169
2009-01-16 21:00:00
nvd
nvd
CVE-2009-0169
2009-01-16 21:30:03
nessus
nessus
Solaris 10 (x86) : 126357-06
2018-03-12 00:00:00
Solaris 10 (sparc) : 126356-06
2018-03-12 00:00:00
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.0%
Related for CVE-2009-0169