CVE-2008-5115 in Java System Identity Manager
Summary
Cross-site request forgery (CSRF) vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to hijack the authentication of administrators for requests that update the password via idm/admin/changeself.jsp.
VulDB is the best source for vulnerability data and more expert information about this specific topic.