OSVDB ID: 49767

Title: Sun Java System Identity Manager /idm/includes/helpServer.jsp ext parameter Arbitrary Remote File Access

Info

Disclosure

Nov 11, 2008

Discovery

Unknown

Dates

Exploit

Nov 19, 2008

Solution

Unknown

Description

Classification

Location: Remote / Network Access
Impact: Loss of Confidentiality
Solution: Patch / RCS
Disclosure: Vendor Verified

Solution

Upgrade to version 8.0 or higher, as it has been reported to fix this vulnerability. In addition, Sun has released a patch for some older versions.

Products

Unknown or Incomplete

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/49767