CVE-2009-0169 : Sun Java System Access Manager 7.1 allows remote authenticated sub-realm adminis

Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm.

Published 2009-01-16 21:30:04

Updated 2017-08-08 01:33:49

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2009-0169

SUN » Java System Access Manager » Version: 7.1 Solaris X86 Edition
cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_x86:*:*:*:*:*
Matching versions
SUN » Java System Access Manager » Version: 7.1 Windows Edition
cpe:2.3:a:sun:java_system_access_manager:7.1:*:windows:*:*:*:*:*
Matching versions
SUN » Java System Access Manager » Version: 7.1 Linux Edition
cpe:2.3:a:sun:java_system_access_manager:7.1:*:linux:*:*:*:*:*
Matching versions
SUN » Java System Access Manager » Version: 7.1 Solaris Sparc Edition
cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_sparc:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2009-0169

EPSS FAQ

0.35%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 68 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2009-0169

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.0	HIGH	AV:N/AC:L/Au:S/C:C/I:C/A:C	8.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2009-0169

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2009-0169

Jump to

Vulnerability Details : CVE-2009-0169

Products affected by CVE-2009-0169

Exploit prediction scoring system (EPSS) score for CVE-2009-0169

CVSS scores for CVE-2009-0169

CWE ids for CVE-2009-0169

References for CVE-2009-0169