Unrated severityNVD Advisory· Published Mar 25, 2009· Updated Apr 23, 2026
CVE-2009-1082
CVE-2009-1082
Description
Sun Java System Identity Manager (IdM) 7.0 through 8.0 allows remote authenticated users to gain privileges by submitting crafted commands to the Admin Console, as demonstrated by privileges for account creation and other administrative capabilities, related to the saveNoValidate action and saveNoValidateAllowedFormsAndWorkflows IDs.
Affected products
4cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*
- cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- sunsolve.sun.com/search/document.donvdPatch
- sunsolve.sun.com/search/document.donvdPatch
- sunsolve.sun.com/search/document.donvdPatch
- www.securityfocus.com/bid/34191nvdPatch
- blogs.sun.com/security/entry/sun_alert_253267_sun_javanvdVendor Advisory
- secunia.com/advisories/34380nvdVendor Advisory
- sunsolve.sun.com/search/document.donvdVendor Advisory
- www.vupen.com/english/advisories/2009/0797nvdVendor Advisory
- securitytracker.com/idnvd
- sunsolve.sun.com/search/document.donvd
News mentions
0No linked articles in our index yet.