CVE-2009-1082

Sun Java System Identity Manager (IdM) 7.0 through 8.0 allows remote authenticated users to gain privileges by submitting crafted commands to the Admin Console, as demonstrated by privileges for account creation and other administrative capabilities, related to the saveNoValidate action and saveNoValidateAllowedFormsAndWorkflows IDs.

• CWE-20

• http://blogs.sun.com/security/entry/sun_alert_253267_sun_javaVendor Advisory
• http://secunia.com/advisories/34380Vendor Advisory
• http://securitytracker.com/id?1021881
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1Patch
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1Patch
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1Patch
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1Vendor Advisory
• http://www.securityfocus.com/bid/34191Patch
• http://www.vupen.com/english/advisories/2009/0797Vendor Advisory
• http://blogs.sun.com/security/entry/sun_alert_253267_sun_javaVendor Advisory
• http://secunia.com/advisories/34380Vendor Advisory
• http://securitytracker.com/id?1021881
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1Patch
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1Patch
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1Patch
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1Vendor Advisory
• http://www.securityfocus.com/bid/34191Patch
• http://www.vupen.com/english/advisories/2009/0797Vendor Advisory

Published

Mar 25, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1076Sun Java System Identity Manager (IdM) 7.0 through 8.0 respo…
• CVE-2009-1077The Change My Password implementation in the admin interface…
• CVE-2009-1078Sun Java System Identity Manager (IdM) 7.0 through 8.0 does …
• CVE-2009-1079Multiple cross-site scripting (XSS) vulnerabilities in Sun J…
• CVE-2009-1080Multiple cross-site scripting (XSS) vulnerabilities in Sun J…
• CVE-2009-1081Multiple cross-site scripting (XSS) vulnerabilities in Sun J…
• CVE-2009-1083Sun Java System Identity Manager (IdM) 7.0 through 8.0 on Li…
• CVE-2009-1084Sun Java System Identity Manager (IdM) 7.0 through 8.0 does …
• CVE-2009-1085Piwik 0.2.32 and earlier stores sensitive information under …
• CVE-2009-1086Heap-based buffer overflow in the ldns_rr_new_frm_str_intern…
• CVE-2009-1087Multiple argument injection vulnerabilities in PPLive.exe in…
• CVE-2009-1088Hannon Hill Cascade Server 5.7 and other versions allows rem…