Cross site scripting

2009-08-0719:00:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.7%

JSON

The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO) is enabled, does not ensure that “policy advice” is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors.

CPENameOperatorVersion
java_system_access_managereq6.32005q1 solaris8sparc
java_system_access_managereq7.1 solaris10sparc
java_system_access_managereq7.1 solaris9sparc
java_system_access_managereq72005q4 solaris10sparc
java_system_access_managereq7.1 solaris8sparc
java_system_access_managereq6.32005q1 solaris10sparc
java_system_access_managereq6.32005q1 solaris9sparc
java_system_access_managereq72005q4 solaris9sparc
java_system_access_managereq72005q4 solaris8sparc
java_system_access_managereq6.32005q1 solaris8x86

Name	Operator	Version
java_system_access_manager	eq	6.32005q1 solaris8sparc
java_system_access_manager	eq	7.1 solaris10sparc
java_system_access_manager	eq	7.1 solaris9sparc
java_system_access_manager	eq	72005q4 solaris10sparc
java_system_access_manager	eq	7.1 solaris8sparc
java_system_access_manager	eq	6.32005q1 solaris10sparc
java_system_access_manager	eq	6.32005q1 solaris9sparc
java_system_access_manager	eq	72005q4 solaris9sparc
java_system_access_manager	eq	72005q4 solaris8sparc
java_system_access_manager	eq	6.32005q1 solaris8x86