CVE-2008-5115

Published: Nov 18, 2008Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to hijack the authentication of administrators for requests that update the password via idm/admin/changeself.jsp.

Affected (7)

Products: Sun: Java System Identity Manager

1 product

Java System Identity Manager

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Sun Java System Identity Manager	Version 6.0
Sun Java System Identity Manager	Version 6.0 sp1
Sun Java System Identity Manager	Version 6.0 sp2
Sun Java System Identity Manager	Version 6.0 sp3
Sun Java System Identity Manager	Version 6.0 sp4
Sun Java System Identity Manager	Version 7.0
Sun Java System Identity Manager	Version 7.1

Related CWEs

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (18)

http://osvdb.org/49766

Source: cve@mitre.org

http://secunia.com/advisories/32606

Source: cve@mitre.org

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1

Source: cve@mitre.org

PatchVendor Advisory

http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr07-11

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/498479/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/32262

Source: cve@mitre.org

http://www.securitytracker.com/id?1021170

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/3128

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/46553

Source: cve@mitre.org

http://osvdb.org/49766

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32606

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr07-11

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/498479/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/32262

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1021170

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/3128

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/46553

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.