CVE-2009-1074

Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to obtain…

published March 25, 2009

CVSS
—
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to obtain sensitive information by sniffing the network, related to "ssl termination devices" and lack of support for relative URLs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02458 · 84.3th percentile
Published
2009-03-25T15:00Z
EPSS history
Timeline
  • 25 MAR 15:00Z
    Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to obtain…
    cvelistv5