CVE-2009-1082

CVE-2009-1082 describes a critical privilege escalation vulnerability in Sun Java System Identity Manager (IdM) versions 7.0 through 8.0. Authenticated attackers can exploit this flaw by submitting specially crafted commands to the Admin Console, leveraging the 'saveNoValidate' action to gain administrative privileges, including the ability to create accounts. This vulnerability carries a CVSS score of 9.0, indicating a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.