CVE-2008-5117 Open redirect vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unsp...
MediumCVSS 6.4
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Open redirect vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun java system identity manager | = 6.0 | No fix listed |
| sun java system identity manager | = 6.0-sp1 | No fix listed |
| sun java system identity manager | = 6.0-sp2 | No fix listed |
| sun java system identity manager | = 6.0-sp3 | No fix listed |
| sun java system identity manager | = 6.0-sp4 | No fix listed |
| sun java system identity manager | = 7.0 | No fix listed |
| sun java system identity manager | = 7.1 | No fix listed |
References
- 49768 vdb-entry
- 32606 third-party-advisory vendor-advisory
- 243386 patch vendor-advisory
- 32262 vdb-entry
- 1021170 vdb-entry
- ADV-2008-3128 vdb-entry
- sun-jsim-unspecified-redirect(46556) vdb-entry