← Database

CVE-2009-2713

MEDIUM CVSS: 4.3 Published: 2009-08-07 Modified: 2026-06-16

Description

The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO) is enabled, does not ensure that "policy advice" is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors.

Affected Platforms

Sun Java System Web ServerSun Java System Access Manager

Weakness Type

NVD-CWE-noinfo

References