CVE-2006-0531

CVSS 7.2v2.0pub. 2006-02-04upd. 2026-04-16

Unspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as "root" to bypass authentication and gain top-level administrator privileges via the amadmin CLI tool.

CVSS Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Sun Java System Access Manager
APP
Sun
7.0

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

Tags

Auth Bypass

CWE

NVD-CWE-Other

References

secunia.com/advisories/18699…

securitytracker.com/id?1015567…

sunsolve.sun.com/search/document.do?assetkey=1-26-10214…

www.securityfocus.com/bid/16474…

www.vupen.com/english/advisories/2006/0430…

exchange.xforce.ibmcloud.com/vulnerabilities/24423…

oval.cisecurity.org/repository/search/definition/oval%3…

Related vulnerabilities

CVE-2009-0169HIGH9.0ten sam produkt

Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as...

CVE-2008-2945HIGH7.5ten sam produkt

Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly...

CVE-2008-2705HIGH9.3ten sam produkt

Unspecified vulnerability in Sun Java System Access Manager (AM) 7.1, when used with certain versions and conf...

CVE-2007-5152HIGH7.5ten sam produkt

Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 9.1 container, does...

CVE-2010-4444MEDIUM6.8ten sam produkt

Unspecified vulnerability in Oracle Sun Java System Access Manager and Oracle OpenSSO 7, 7.1, and 8 allows rem...