{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Sun Java System Identify Server 6.2.","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}},{"description":"Sun Java System Access Manager 6 2005Q1 ;","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}},{"description":"Sun Java System Identify Server 6.1 ;","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}},{"description":"Sun Java System Access Manager 7.1 ;","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}},{"description":"Sun Java System Access Manager 7 2005Q4 ;","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}}],"affected_systems_content":null,"content":"## Description\n\nUne vuln\u00e9rabilit\u00e9 est pr\u00e9sente dans Sun Java System Access Manager.\nCelle-ci est relative \u00e0 la gestion de signatures au format XML. Un\nutilisateur distant peut exploiter cette vuln\u00e9rabilit\u00e9 au moyen d'une\nsignature XML incluant une feuille de style XSLT particuli\u00e8re afin\nd'ex\u00e9cuter du code arbitraire dans le contexte de l'application\nvuln\u00e9rable.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[],"links":[{"title":"Bulletin de s\u00e9curit\u00e9 Sun Solaris #201538 du 26 juin 2008 :","url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201538-1"}],"reference":"CERTA-2008-AVI-347","revisions":[{"description":"version initiale.","revision_date":"2008-07-04T00:00:00.000000"}],"risks":[{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"}],"summary":"Une vuln\u00e9rabilit\u00e9 dans Sun Java System Access Manager permet \u00e0 un\nutilisateur distant d'ex\u00e9cuter du code arbitraire \u00e0 distance.\n","title":"Vuln\u00e9rabilit\u00e9 de Sun Java System Access Manager","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Sun #201538","url":null}]}