The company said in a security alert that nine issues within its identity management offering would be resolved by the update. Among these are the ability to intercept data transfers and remotely execute code with administrator rights.
Other vulnerabilities include multiple cross-site scripting flaws, and a vulnerability which could potentially allow an unauthorised user to erase and overwrite passwords.
The update affects versions 7.0, 7.1, 7.1.1 and 8.0 of Sun Java System Identity Manager.
Version 8.1 is not believed to be affected, and administrators running these systems will not need to apply the patch. Sun said that administrators can check their version of the software using the 'help' tab in the software's administration console screen.
Other than applying the patch, the company did not list any further resolutions for the issues or suggestions on mitigating the risk from the vulnerabilities.
No other Sun products or components are affected by the update.
Sun warns of new security vulnerability
By
Shaun Nichols, vnunet
on Mar 25, 2009 6:04AM
Sun Microsystems is advising administrators to update their software after a vulnerability was detected in the Java System Identity Manager software.
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
Partner Content
Beat the DDoS blackmails in 2021
Partner Content
Why companies fail at picking cloud modernisation partners
Partner Content
Shut the door on ransomware
Partner Content
MSI shows first laptops with Wi-Fi 6E, Nvidia RTX 30 graphics
