Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to hijack the authentication of administrators for requests that update the password via idm/admin/changeself.jsp.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sun Java System Identity Manager 'changeself.jsp' 跨站请求伪造漏洞
Vulnerability Description
Sun Java System Identity Manager是一个完整的端到端的保护敏感数据和管理标识配置文件与许可的解决方案。 (/idm/admin/changeself.jsp)中存在跨站请求伪造漏洞。由于没有使用不可预测的值来分解update password请求，也没有对管理用户要求输入之前的口令，因此如果管理用户在认证到Identity Manager期间如果受骗访问了恶意的HTML页面的话就可能导致劫持管理帐号。
CVSS Information
N/A
Vulnerability Type
N/A