CVE-2009-0170
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users...
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console.
Exploit likelihood
What each source reports
NVD Score used
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console.
- Record
CVE-2009-0170- CVSS 2.0
- 6.0 Medium
AV:N/AC:M/Au:S/C:P/I:P/A:P - Weakness
- CWE-255, CWE-264
- Updated
- 2026-11-02
CVE ListNo score
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console.
- Record
CVE-2009-0170- Updated
- 2026-11-02
EUVDEUVD-2009-0179No score
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console.
- Record
EUVD-2009-0179- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-78gh-v8vr-85chNo score
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users...
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console.
- Record
GHSA-78gh-v8vr-85ch- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-0170 is a medium vulnerability (CVSS 6.0) in Sun Java System Access Manager, published January 16, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.67%, the 77th percentile. No source names a fixed version.
References
sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1
securityfocus.com/bid/33265
securitytracker.com/id?1021605
exchange.xforce.ibmcloud.com/vulnerabilities/47942
vupen.com/english/advisories/2009/0156
nvd.nist.gov/vuln/detail/CVE-2009-0170
github.com/advisories/GHSA-78gh-v8vr-85ch