| Package | Affected versions | Patched versions |
|---|---|---|
| java system access manager | = 6.3_2005q1= 7.0_2005q4= 7.1= 7_2005q4 | |
| java system web server | = 7.0 | |
| opensso enterprise | = 8.0 |
Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7.1; and OpenSSO Enterprise 8.0; when AMConfig.properties enables the debug flag, allows local users to discover cleartext passwords by reading debug files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free