CVE-2009-1076
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the end-user question-based login feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.
Sun Java System Identity Manager (IdM) v7.0 hasta v8.0 responde de forma diferente a la no utilización de usuario final de una cuestión basada en la característica de inicio de sesión dependiendo de si la cuenta de usuario existe, lo cual permite a atacantes remotos enumerar nombres de usuario válidos.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2009-03-25 CVE Reserved
- 2009-03-25 CVE Published
- 2024-09-16 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| http://securitytracker.com/id?1021881 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1 | 2009-03-25 | |
| http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1 | 2009-03-25 | |
| http://www.securityfocus.com/bid/34191 | 2009-03-25 |
| URL | Date | SRC |
|---|---|---|
| http://blogs.sun.com/security/entry/sun_alert_253267_sun_java | 2009-03-25 | |
| http://secunia.com/advisories/34380 | 2009-03-25 | |
| http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1 | 2009-03-25 | |
| http://www.vupen.com/english/advisories/2009/0797 | 2009-03-25 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Sun Search vendor "Sun" | Java System Identity Manager Search vendor "Sun" for product "Java System Identity Manager" | 7.0 Search vendor "Sun" for product "Java System Identity Manager" and version "7.0" | - |
Affected
| ||||||
| Sun Search vendor "Sun" | Java System Identity Manager Search vendor "Sun" for product "Java System Identity Manager" | 7.1 Search vendor "Sun" for product "Java System Identity Manager" and version "7.1" | - |
Affected
| ||||||
| Sun Search vendor "Sun" | Java System Identity Manager Search vendor "Sun" for product "Java System Identity Manager" | 7.1.1 Search vendor "Sun" for product "Java System Identity Manager" and version "7.1.1" | - |
Affected
| ||||||
| Sun Search vendor "Sun" | Java System Identity Manager Search vendor "Sun" for product "Java System Identity Manager" | 8.0 Search vendor "Sun" for product "Java System Identity Manager" and version "8.0" | - |
Affected
| ||||||