CVE-2009-2712
sun: no CVSS score yet. EPSS 0.4% chance of exploitation in the next 30 days.
Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7.1; and OpenSSO Enterprise 8.0; when AMConfig.properties enables the debug flag, allows local users to discover cleartext passwords by reading debug files.
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sun:java_system_access_manager
- sun:java_system_web_server
- sun:opensso_enterprise