CVE-2009-1075

Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the Forgot Password feature depending on whether the user account…

published March 25, 2009

CVSS
—
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the Forgot Password feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02458 · 84.3th percentile
Published
2009-03-25T15:00Z
EPSS history
Timeline
  • 25 MAR 15:00Z
    Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the Forgot Password feature depending on whether the user account…
    cvelistv5