[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxpYH2JuuNQKIiJn47LljP-1QjCd0tcZgexD3p2HzPfY":3,"g5a-risk:CVE-2009-1077":162},{"success":4,"data":5,"meta":160},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":52,"references":53,"referencesCount":112,"weaknesses":113,"weaknessesCount":117,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":118,"seoMetadata":119,"configurations":144,"relatedVendorCves":158,"notableEvents":159},"CVE-2009-1077","What is CVE-2009-1077?","The Change My Password implementation in the admin interface in Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the RequiresChallenge property setting, which allows remote authenticated users to change the passwords of other users, as demonstrated by changing the administrator's password.","The Change My Password implementation in the admin interface in Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the RequiresChallenge...","2009-03-25T15:30:00.327","2026-06-16T23:06:27.33",6.5,"AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","SINGLE","PARTIAL","",null,"MEDIUM",8,6.4,false,[],0.02475,[34,34,34,34,34,34,34],"Medium",[38,43,46,49],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"sun","java_system_identity_manager","7.0","cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":44,"criteria":45,"vulnerable":4},"7.1","cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":47,"criteria":48,"vulnerable":4},"7.1.1","cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":50,"criteria":51,"vulnerable":4},"8.0","cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*",4,[54,60,64,68,71,74,77,80,83,88,92,94,96,98,100,102,104,106,108,110],{"url":55,"source":56,"tags":57},"http:\u002F\u002Fblogs.sun.com\u002Fsecurity\u002Fentry\u002Fsun_alert_253267_sun_java","Sun",[58,59],"Patch","Vendor Advisory",{"url":61,"source":62,"tags":63},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F34380","Secunia",[59],{"url":65,"source":66,"tags":67},"http:\u002F\u002Fsecuritytracker.com\u002Fid?1021881","Securitytracker",[],{"url":69,"source":56,"tags":70},"http:\u002F\u002Fsunsolve.sun.com\u002Fsearch\u002Fdocument.do?assetkey=1-21-137621-11-1",[58],{"url":72,"source":56,"tags":73},"http:\u002F\u002Fsunsolve.sun.com\u002Fsearch\u002Fdocument.do?assetkey=1-21-139010-06-1",[58],{"url":75,"source":56,"tags":76},"http:\u002F\u002Fsunsolve.sun.com\u002Fsearch\u002Fdocument.do?assetkey=1-21-140935-01-1",[58],{"url":78,"source":56,"tags":79},"http:\u002F\u002Fsunsolve.sun.com\u002Fsearch\u002Fdocument.do?assetkey=1-21-140936-01-1",[58,59],{"url":81,"source":56,"tags":82},"http:\u002F\u002Fsunsolve.sun.com\u002Fsearch\u002Fdocument.do?assetkey=1-66-253267-1",[58,59],{"url":84,"source":85,"tags":86},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F34191","Securityfocus",[87,58],"Exploit",{"url":89,"source":90,"tags":91},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2009\u002F0797","Vupen",[59],{"url":55,"source":56,"tags":93},[58,59],{"url":61,"source":62,"tags":95},[59],{"url":65,"source":66,"tags":97},[],{"url":69,"source":56,"tags":99},[58],{"url":72,"source":56,"tags":101},[58],{"url":75,"source":56,"tags":103},[58],{"url":78,"source":56,"tags":105},[58,59],{"url":81,"source":56,"tags":107},[58,59],{"url":84,"source":85,"tags":109},[87,58],{"url":89,"source":90,"tags":111},[59],20,[114],{"id":115,"name":115,"description":116},"Unknown","CWE-264",1,[],{"title":120,"metaDescription":121,"keywords":122,"canonicalUrl":123,"structuredData":124},"What is CVE-2009-1077? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2009-1077, a medium severity cyber security vulnerability from 2009. The Change My Password implementation in the admin interfa...","CVE-2009-1077, CVE-2009-1077 vulnerability, CVE-2009-1077 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2009, CVSS score, exploit, patch, remediation, sun security, java_system_identity_manager vulnerability","\u002Fwhat-is\u002Fcve-2009-1077",{"@context":125,"@type":126,"headline":120,"description":121,"datePublished":10,"dateModified":11,"author":127,"publisher":131,"about":135,"mainEntityOfPage":139,"articleSection":142,"keywords":143},"https:\u002F\u002Fschema.org","TechArticle",{"@type":128,"name":129,"url":130},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":128,"name":129,"url":130,"logo":132},{"@type":133,"url":134},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":136,"name":6,"description":137,"additionalType":138},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":140,"@id":141},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2009-1077","Cybersecurity","CVE-2009-1077, CVE-2009-1077 vulnerability, CVE-2009-1077 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[145],{"Operator":28,"Negate":28,"Nodes":146},[147],{"Operator":148,"Negate":32,"CPEMatch":149},"OR",[150,152,154,156],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":151,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"0980492E-B7DB-4B9F-A400-FDC47DB89A95",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":153,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"3A5C87C0-3734-4568-97A6-6AB8979AABE7",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":155,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"E1E3B2F0-90E6-4868-915F-87131711EEE5",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":157,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"90BC0B23-0CEE-489B-B89A-8776272EC8D2",[],[],{"lastModified":11,"cacheTime":161,"version":22},1792265575937,{"score":163,"band":36,"action":164,"scoredAt":165},46,"Plan remediation","2026-10-17T06:36:25.144384+00:00"]