CVE-2008-5115: Sun Java System Identity Manager

Medium severity, CVSS 6.8. EPSS: 3.1% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to hijack the authentication of administrators for requests that update the password via idm/admin/changeself.jsp.

Affected products

• Sun Java System Identity Manager: version 6.0 only; version 7.0 only; version 7.1 only

Published 2008-11-18. Last modified 2026-06-16.