CVE-2009-1076

Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the end-user question-based login feature depending on whether the…

published March 25, 2009

CVSS
—
EPSS
2%
Percentile
83.1
In the wild
Unconfirmed
What it is

Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the end-user question-based login feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02290 · 83.1th percentile
Published
2009-03-25T15:00Z
EPSS history
Timeline
  • 25 MAR 15:00Z
    Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the end-user question-based login feature depending on whether the…
    cvelistv5