Security Advisory

CVE-2009-1077

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-03-25 15:00:00

Last updated 2024-09-16 20:22:35

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The Change My Password implementation in the admin interface in Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the RequiresChallenge property setting, which allows remote authenticated users to change the passwords of other users, as demonstrated by changing the administrator's password.

← Browse all CVEs View on cve.org ↗