CVE-2009-1084: Sun Java System Identity Manager

Medium severity, CVSS 6.4. EPSS: 2.6% chance of exploitation in the next 30 days.

Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying this object.

Affected products

• Sun Java System Identity Manager: version 7.0 only; version 7.1 only; version 7.1.1 only; version 8.0 only

Published 2009-03-25. Last modified 2026-06-16.