CVE-2009-0170 Information disclosure in n/a
Authenticated console users can discover passwords and access unauthorized resources via the Configuration Items component in Sun Java System Access Manager.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2009-0170?
CVE-2009-0170 is a medium-severity vulnerability in n/a, published on 16 Jan 2009. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console.
Which versions are affected by CVE-2009-0170?
It affects 1 product.
Products include Sun Java System Access Manager.
How do I fix CVE-2009-0170?
No fix has been published for CVE-2009-0170 yet. Limit exposure of the affected software until one is available.
Is CVE-2009-0170 being exploited?
There is no known exploitation of CVE-2009-0170 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-78gh-v8vr-85ch.