CVE-2010-4444 - Unspecified vulnerability in Oracle Sun Java System Access Manager and Oracle OpenSSO 7, 7.1, and 8

CVE-2010-4444

Summary

Unspecified vulnerability in Oracle Sun Java System Access Manager and Oracle OpenSSO 7, 7.1, and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

References

Vulnerable Configurations

cpe:2.3:a:oracle:opensso:7:*:*:*:*:*:*:*
cpe:2.3:a:oracle:opensso:7:*:*:*:*:*:*:*
cpe:2.3:a:oracle:opensso:7.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:opensso:7.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:opensso:8:*:*:*:*:*:*:*
cpe:2.3:a:oracle:opensso:8:*:*:*:*:*:*:*
cpe:2.3:a:sun:java_system_access_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:sun:java_system_access_manager:*:*:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 17-08-2017 - 01:33)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

refmap via4

bid	45884
confirm	http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
osvdb	70579 70580
secunia	42986
vupen	ADV-2011-0153
xf	oracle-sso-java-unauth-access(64811)

Last major update

17-08-2017 - 01:33

Published

19-01-2011 - 17:00

Last modified

17-08-2017 - 01:33