Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console.

Sun Java System Access Manager 7.1 Solaris_x86.
Date this patch was last updated by Sun : Apr/23/11

AM 7.0_x86: Sun Java System Access Manager 2005Q4.
Date this patch was last updated by Sun : Nov/03/10

Sun Java(TM) System Access Manager 6 2005Q1.
Date this patch was last updated by Sun : Jun/29/09

Sun Java System Access Manager 7.1 Solaris.
Date this patch was last updated by Sun : Apr/23/11

AM 7.0: Sun Java System Access Manager 2005Q4.
Date this patch was last updated by Sun : Nov/03/10

The remote host is running a version of Sun Java System Access Manager 7.1 earlier than Patch 2. Such versions are potentially affected by multiple issues : 

  - A vulnerability may allow unauthorized access to resources by revealing passwords to remote users who have privileges to access the administration console. (1-66-242166-1)

  - A sub-realm administrator may be able to escalate their privileges and access the root realm as an administrator. (1-66-249106-1)

  - A username-enumeration weakness could allow an attacker to determine valid user-names. (1-66-242026-1)

ID	Name	Product	Family	Severity
107950	Solaris 10 (x86) : 126357-06	Nessus	Solaris Local Security Checks	critical
107871	Solaris 10 (x86) : 120955-12	Nessus	Solaris Local Security Checks	critical
107821	Solaris 10 (x86) : 119465-17	Nessus	Solaris Local Security Checks	medium
107450	Solaris 10 (sparc) : 126356-06	Nessus	Solaris Local Security Checks	critical
107369	Solaris 10 (sparc) : 120954-12	Nessus	Solaris Local Security Checks	critical
107318	Solaris 10 (sparc) : 119465-17	Nessus	Solaris Local Security Checks	medium
5132	Sun Java System Access Manager 7.1 < Patch 2 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	medium
38005	Solaris 9 (x86) : 120955-12	Nessus	Solaris Local Security Checks	critical
37533	Solaris 9 (sparc) : 120954-12	Nessus	Solaris Local Security Checks	critical
37271	Solaris 8 (sparc) : 120954-12	Nessus	Solaris Local Security Checks	critical
23611	Solaris 9 (x86) : 119465-17	Nessus	Solaris Local Security Checks	medium
23553	Solaris 9 (sparc) : 119465-17	Nessus	Solaris Local Security Checks	medium
23466	Solaris 8 (x86) : 119465-17	Nessus	Solaris Local Security Checks	medium
23415	Solaris 8 (sparc) : 119465-17	Nessus	Solaris Local Security Checks	medium

Detections

Analytics

CVE-2009-0170

high

Tenable Plugins

critical

critical

medium

critical

critical

medium

medium

critical

critical

critical

medium

medium

medium

medium