Sun Security Blog
Security
|
10 Jul 2007
Sun Alert 101918 Security Vulnerability in the Logging Output of Sun Java System Access Manager
Product: Sun Java System Access Manager 2004Q2, Sun Java System Access Manager 6 2005Q1, Sun Java System Identity Server 6.1 When the debug level within Sun Java System Access Manager (formerly Sun Java System Identity Server) is set to "message," login passwords may be logged in plain text and are therefore readable by local unprivileged users. This would allow that user to gain unauthorized access to user identities which are managed by Sun Java System Access Manager. Avoidance: Patch, Workaround State: Workaround First released: 10-Jul-2007
Permalink
|
Comments [0]
Trackback URL: http://blogs.sun.com/security/entry/sun_alert_101918_security_vulnerability
Comments:
Post a Comment: |
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
