Secunia

A security issue has been reported in Sun Java System Access Manager, which can result in the exposure of sensitive information.

The security issue is caused to to an unspecified error related to the CDCServlet component, which can result in policy advice being presented to the wrong client. This can potentially be exploited to gain unauthorised access to other users' data.

Successful exploitation requires that Cross Domain Single Sign On (CDSSO) is used.

The security issue is reported in Sun Java System Access Manager 7.1 and 7 2005Q4.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-255968-1

Deep Links
Links available in Customer Area