CVE-2009-2713

The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO) is enabled, does not ensure that "policy advice" is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors.

• http://secunia.com/advisories/36167Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1Patch
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-255968-1Vendor Advisory
• http://www.securityfocus.com/bid/35961Patch
• http://www.vupen.com/english/advisories/2009/2176
• http://secunia.com/advisories/36167Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1Patch
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-255968-1Vendor Advisory
• http://www.securityfocus.com/bid/35961Patch
• http://www.vupen.com/english/advisories/2009/2176

Published

Aug 7, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2707Unspecified vulnerability in ia32el (aka the IA 32 emulation…
• CVE-2009-2708Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2009-2709Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2009-2710Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2009-2711XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv…
• CVE-2009-2712Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7…
• CVE-2009-2714Unspecified vulnerability in Sun VirtualBox 3.0.0 and 3.0.2 …
• CVE-2009-2715Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS user…
• CVE-2009-2716The plugin functionality in Sun Java SE 6 before Update 15 d…
• CVE-2009-2717The Abstract Window Toolkit (AWT) implementation in Sun Java…
• CVE-2009-2718The Abstract Window Toolkit (AWT) implementation in Sun Java…
• CVE-2009-2719The Java Web Start implementation in Sun Java SE 6 before Up…