CVE-2009-0348

MEDIUM 5.0CVE-2009-0348 · Published 29/01/2009 · updated 16/06/2026

In short

CVE-2009-0348 is a MEDIUM (CVSS 5.0) vulnerability affecting java system access manager (sun).
Chance of exploitation in the next 30 days (EPSS): 8.2%, higher than 94.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
java system access manager sun	`= 6.3_2005q1= 7.1= 7_2005q4`	No fix yet

Description

The login module in Sun Java System Access Manager 6 2005Q1 (aka 6.3), 7 2005Q4 (aka 7.0), and 7.1 responds differently to a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.

References

secunia.com/advisories/33688 · Vendor Advisory
sunsolve.sun.com/search/document.do · Patch
sunsolve.sun.com/search/document.do · Patch
securityfocus.com/bid/33489
vupen.com/english/advisories/2009/0269
exchange.xforce.ibmcloud.com/vulnerabilities/48283

More vulnerabilities in java system access manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

java system access manager

sun

= 6.3_2005q1= 7.1= 7_2005q4

No fix yet

More vulnerabilities in java system access manager

See all →