CVE-2009-2713

2009-08-0718:33:00

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.7%

JSON

The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO) is enabled, does not ensure that “policy advice” is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors.