Unrated severityNVD Advisory· Published Mar 25, 2009· Updated Jun 16, 2026
CVE-2009-1082
CVE-2009-1082
Description
Sun Java System Identity Manager (IdM) 7.0 through 8.0 allows remote authenticated users to gain privileges by submitting crafted commands to the Admin Console, as demonstrated by privileges for account creation and other administrative capabilities, related to the saveNoValidate action and saveNoValidateAllowedFormsAndWorkflows IDs.
Affected products
5cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*
- cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*
- (no CPE)range: 7.0 - 8.0
Patches
Vulnerability mechanics
References
10- sunsolve.sun.com/search/document.donvdPatch
- sunsolve.sun.com/search/document.donvdPatch
- sunsolve.sun.com/search/document.donvdPatch
- www.securityfocus.com/bid/34191nvdPatch
- blogs.sun.com/security/entry/sun_alert_253267_sun_javanvdVendor Advisory
- secunia.com/advisories/34380nvdVendor Advisory
- sunsolve.sun.com/search/document.donvdVendor Advisory
- www.vupen.com/english/advisories/2009/0797nvdVendor Advisory
- securitytracker.com/idnvd
- sunsolve.sun.com/search/document.donvd
News mentions
0No linked articles in our index yet.