The company said that some nine issues within its indentity management offering would be resolved by the update. Among the vulnerabilities patched by the flaw include the ability to intercept data transfers and remotely execute code with administrator rights.Other vulnerabilities include multiple cross-site scripting flaws and a vulnerability which could potentially allow an unauthorised user to erase and overwrite passwords.The update affects versions 7.0, 7.1, 7.1.1 and 8.0 of the Sun Java System Identity Manager software.Version 8.1 is not believed to be effected by any of the vulnerabilities and administrators running those systems will not need to apply the patch. Sun said that administrators can check their version of the software by "help" tab when in the software's administration console screen.Other than applying the patch, the company did not list any further resolutions for the issues or suggestions on mitigating the risk from the vulnerabilities.No other Sun products or components are affected by the update.
Copyright ©v3.co.uk
A confirmation email has been sent to your email address - SUPPLIED GOES EMAIL HERE. Please click on the link in the email to verify your email address. You need to verify your email before you can start posting.
If you do not receive your confirmation email within the next few minutes, it may be because the email has been captured by a junk mail filter. Please ensure you add the domain @itnews.com.au to your white-listed senders.