{"id":"CVE-2009-1084","aliases":["EUVD-2009-1085","GHSA-6m5g-4p44-6rcf"],"status":"published","title":"Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the...","description":"Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying this object.","severity":{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02563,"percentile":0.85227,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2009-03-25T15:00:00Z","modified":"2026-06-16T23:06:28Z","products":[{"vendor":"sun","product":"java_system_identity_manager"}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred","Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://securitytracker.com/id?1021881","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/34191","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49607","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://secunia.com/advisories/34380","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1084"},{"url":"https://github.com/advisories/GHSA-6m5g-4p44-6rcf"}],"sources":{"cve":[{"id":"CVE-2009-1084","description":"Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying this object.","status":"published","published":"2009-03-25T15:00:00Z","modified":"2024-08-07T04:57:17.829Z","updated_at":"2026-11-02T14:33:25.516454Z"}],"euvd":[{"id":"EUVD-2009-1085","description":"Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying this object.","status":"published","published":"2009-03-25T15:00:00Z","modified":"2024-08-07T04:57:17Z","updated_at":"2026-11-03T01:39:23.366568Z"}],"ghsa":[{"id":"GHSA-6m5g-4p44-6rcf","title":"Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the...","description":"Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying this object.","status":"published","published":"2022-05-02T03:21:31Z","modified":"2023-01-31T05:08:09Z","updated_at":"2026-11-02T14:49:20.892642Z"}],"nvd":[{"id":"CVE-2009-1084","description":"Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying this object.","status":"published","published":"2009-03-25T15:30:00.547Z","modified":"2026-06-16T23:06:28.2Z","cvss":[{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:01:34.44527Z"}]}}