AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-1077

MEDIUM · CVSS 6.5 EPSS 2.48%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-03-25 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2009-1077
Severity
MEDIUM
CVSS
6.5
EPSS
2.48%
Java

Original NVD Description

The Change My Password implementation in the admin interface in Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the RequiresChallenge property setting, which allows remote authenticated users to change the passwords of other users, as demonstrated by changing the administrator's password.