CVE-2009-2713 | BDVDB-2026-37756 Detail

Description#

The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO) is enabled, does not ensure that "policy advice" is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1
http://secunia.com/advisories/36167
http://www.securityfocus.com/bid/35961
http://sunsolve.sun.com/search/document.do?assetkey=1-66-255968-1
http://www.vupen.com/english/advisories/2009/2176

Exploit#

No public exploit known

History#

Version 12009-08-07Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.