Lucene search
HistoryAug 07, 2009 - 7:00 p.m.
CVE-2009-2712
cve-2009-2712
sun java
access manager
opensso
security
vulnerability
cleartext passwords
debug files
local users
6 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
13.1%
Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7.1; and OpenSSO Enterprise 8.0; when AMConfig.properties enables the debug flag, allows local users to discover cleartext passwords by reading debug files.
Affected configurations
Node
sunjava_system_access_managerMatch6.3_2005q1solaris_10_sparc
ORsunjava_system_access_managerMatch6.3_2005q1solaris_8_sparc
ORsunjava_system_access_managerMatch6.3_2005q1solaris_9_sparc
ORsunjava_system_access_managerMatch7.1solaris_10_sparc
ORsunjava_system_access_managerMatch7.1solaris_8_sparc
ORsunjava_system_access_managerMatch7.1solaris_9_sparc
ORsunjava_system_access_managerMatch7_2005q4solaris_10_sparc
ORsunjava_system_access_managerMatch7_2005q4solaris_8_sparc
ORsunjava_system_access_managerMatch7_2005q4solaris_9_sparc
Node
sunjava_system_access_managerMatch6.3_2005q1solaris_10_x86
ORsunjava_system_access_managerMatch6.3_2005q1solaris_8_x86
ORsunjava_system_access_managerMatch6.3_2005q1solaris_9_x86
ORsunjava_system_access_managerMatch7.1solaris_10_x86
ORsunjava_system_access_managerMatch7.1solaris_8_x86
ORsunjava_system_access_managerMatch7.1solaris_9_x86
ORsunjava_system_access_managerMatch7_2005q4solaris_10_x86
ORsunjava_system_access_managerMatch7_2005q4solaris_8_x86
ORsunjava_system_access_managerMatch7_2005q4solaris_9_x86
Node
sunjava_system_access_managerMatch6.3_2005q1solaris_10_linux
ORsunjava_system_access_managerMatch6.3_2005q1solaris_8_linux
ORsunjava_system_access_managerMatch6.3_2005q1solaris_9_linux
ORsunjava_system_access_managerMatch7.1solaris_10_linux
ORsunjava_system_access_managerMatch7.1solaris_8_linux
ORsunjava_system_access_managerMatch7.1solaris_9_linux
ORsunjava_system_access_managerMatch7_2005q4solaris_10_linux
ORsunjava_system_access_managerMatch7_2005q4solaris_8_linux
ORsunjava_system_access_managerMatch7_2005q4solaris_9_linux
Node
sunjava_system_access_managerMatch7.0_2005q4windows
ORsunjava_system_access_managerMatch7.1windows
Node
sunjava_system_web_serverMatch7.0hp_ux
Node
sunjava_system_access_managerMatch7.1war
ORsunopensso_enterpriseMatch8.0
Related
nvd
nvd
CVE-2009-2712
2009-08-07 19:00:01
cvelist
cvelist
CVE-2009-2712
2009-08-07 18:33:00
prion
prion
Code injection
2009-08-07 19:00:00
openvas
openvas
Sun JS Access Manager And OpenSSO Information Disclosure vulnerability
2009-08-26 00:00:00
Sun JS Access Manager And OpenSSO Information Disclosure vulnerability
2009-08-26 00:00:00
nessus
nessus
Solaris 10 (sparc) : 119465-17 (deprecated)
2006-11-06 00:00:00
Solaris 10 (x86) : 119465-17
2018-03-12 00:00:00
Solaris 8 (x86) : 119465-17
2006-11-06 00:00:00
6 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
13.1%
Related for CVE-2009-2712