CVE-2009-0170
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users...
CVE-2009-0170 is a medium vulnerability (CVSS 6.0) in Sun Java System Access Manager, published January 16, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.67%, the 76th percentile. No source names a fixed version.
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console.
Exploit likelihood
What each source reports
NVD Score used
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console.
- Record
CVE-2009-0170- CVSS 2.0
- 6.0 Medium
AV:N/AC:M/Au:S/C:P/I:P/A:P - Weakness
- CWE-255, CWE-264
- Updated
- 2026-11-02
CVE List No score
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console.
- Record
CVE-2009-0170- Updated
- 2026-11-02
EUVDEUVD-2009-0179 No score
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console.
- Record
EUVD-2009-0179- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-78gh-v8vr-85ch No score
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users...
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console.
- Record
GHSA-78gh-v8vr-85ch- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1
securityfocus.com/bid/33265
securitytracker.com/id?1021605
exchange.xforce.ibmcloud.com/vulnerabilities/47942
vupen.com/english/advisories/2009/0156
nvd.nist.gov/vuln/detail/CVE-2009-0170
github.com/advisories/GHSA-78gh-v8vr-85ch