CVE-2009-2712: Sun Java System Access Manager

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7.1; and OpenSSO Enterprise 8.0; when AMConfig.properties enables the debug flag, allows local users to discover cleartext passwords by reading debug files.

Affected products

• Sun Java System Access Manager: version 6.3_2005q1 only; version 7.1 only; version 7_2005q4 only; version 7.0_2005q4 only
• Sun Java System Web Server: version 7.0 only
• Sun Opensso Enterprise: version 8.0 only

Published 2009-08-07. Last modified 2026-06-16.