Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Change My Password implementation in the admin interface in Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the RequiresChallenge property setting, which allows remote authenticated users to change the passwords of other users, as demonstrated by changing the administrator's password.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sun Java System Identity Manager 更改口令工具访问控制漏洞
Vulnerability Description
Sun Java System Identity Manager是一个完整的端到端的保护敏感数据和管理标识配置文件与许可的解决方案。 Sun Java System Identity Manager 更改口令工具存在访问控制漏洞，远程登录用户可以通过该漏洞修改其它用户和管理员口令。
CVSS Information
N/A
Vulnerability Type
N/A