CVE-2009-0170

Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:S/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 72%
VendorProductVersion
sunjava_system_access_manager
6.3
sunjava_system_access_manager
7.0_2005q4:_2005q4
sunjava_system_access_manager
7.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-242166-1
http://www.securityfocus.com/bid/33265
http://www.securitytracker.com/id?1021605
http://www.vupen.com/english/advisories/2009/0156
https://exchange.xforce.ibmcloud.com/vulnerabilities/47942
http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-242166-1
http://www.securityfocus.com/bid/33265
http://www.securitytracker.com/id?1021605
http://www.vupen.com/english/advisories/2009/0156
https://exchange.xforce.ibmcloud.com/vulnerabilities/47942