24 Mar 2009
Sun Microsystems is advising administrators to update their software after a vulnerability was detected in the Java System Identity Manager software.
The company said in a security alert that nine issues within its identity management offering would be resolved by the update. Among these are the ability to intercept data transfers and remotely execute code with administrator rights.
Other vulnerabilities include multiple cross-site scripting flaws, and a vulnerability which could potentially allow an unauthorised user to erase and overwrite passwords.
The update affects versions 7.0, 7.1, 7.1.1 and 8.0 of Sun Java System Identity Manager.
Version 8.1 is not believed to be affected, and administrators running these systems will not need to apply the patch. Sun said that administrators can check their version of the software using the 'help' tab in the software's administration console screen.
Other than applying the patch, the company did not list any further resolutions for the issues or suggestions on mitigating the risk from the vulnerabilities.
No other Sun products or components are affected by the update.
Latest stories from Management
Related articles
Related jobs
Poll
What is the most important IT priority for your company this year?
Hands on with the highly anticipated Android 4.0 Ice Cream Sandwich hybrid tablet
Connect with V3.co.uk
This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes
Why good data management at all levels is essential in the modern business (video, 6mins)
Java / J2EE analyst programmer with experience of building...
Crystal Reports Developer London or Dublin £340 per day...
Our client is a major Broadcasting company seeking a...
Support Engineer required to work for leading Online...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?