CVE-2009-0170

Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console.

• CWE-255
• CWE-264

• http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-242166-1Patch, Vendor Advisory
• http://www.securityfocus.com/bid/33265Patch
• http://www.securitytracker.com/id?1021605
• http://www.vupen.com/english/advisories/2009/0156
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47942
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-242166-1Patch, Vendor Advisory
• http://www.securityfocus.com/bid/33265Patch
• http://www.securitytracker.com/id?1021605
• http://www.vupen.com/english/advisories/2009/0156
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47942

Published

Jan 16, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0164The web interface for CUPS before 1.3.10 does not validate t…
• CVE-2009-0165Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and ea…
• CVE-2009-0166The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 an…
• CVE-2009-0167Unspecified vulnerability in lpadmin in Sun Solaris 10 and O…
• CVE-2009-0168Unspecified vulnerability in ppdmgr in Sun Solaris 10 and Op…
• CVE-2009-0169Sun Java System Access Manager 7.1 allows remote authenticat…
• CVE-2009-0171The Sun SPARC Enterprise M4000 and M5000 Server, within a ce…
• CVE-2009-0172Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 bef…
• CVE-2009-0173Unspecified vulnerability in the server in IBM DB2 8 before …
• CVE-2009-0174Stack-based buffer overflow in VUPlayer 2.49 allows remote a…
• CVE-2009-0175Heap-based buffer overflow in Heathco Software MP3 TrackMake…
• CVE-2009-0176Multiple heap-based buffer overflows in the PDF distiller in…