VULNERABILITY INTELLIGENCE

CVE-2009-2712

CVSS score2.1 LOW
EPSS probability0.37%
CISA KEVNot currently listed
Published2009-08-07
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7.1; and OpenSSO Enterprise 8.0; when AMConfig.properties enables the debug flag, allows local users to discover cleartext passwords by reading debug files.

Primary references