CVE:CVE-2009-2712
CNNVD:CNNVD-200908-052
Sun Java System Access Manager 6.3 2005Q1， 7.0 2005Q4， 和 7.1; 及 OpenSSO Enterprise 8.0存在明文密码泄露漏洞。当AMConfig.properties激活调试工具标记时，会允许本地用户通过读取调试工具标记来获取明文密码。
solution:Upgrade sun java_system_access_manager to a higher version than 6.3_2005q1,7.1,7_2005q4,7.0_2005q4,and avoid the version 6.3_2005q1,7.1,7_2005q4,7.0_2005q4; Upgrade sun java_system_web_server to a higher version than 7.0,and avoid the version 7.0; Upgrade sun opensso_enterprise to a higher version than 8.0,and avoid the version 8.0