← Database

CVE-2009-0170

MEDIUM CVSS: 6.0 Published: 2009-01-16 Modified: 2026-06-16

Description

Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console.

Affected Platforms

Sun Java System Access Manager

Weakness Type

CWE-255, CWE-264

References