Note: This is an archival copy of Security Sun Alert 228548 as previously published on http://sunsolve.sun.com.|
Latest version of this security advisory is available from http://support.oracle.com as Sun Alert 1017444.1.
Sun Java System Communications Express 2005Q1
Sun Java System Communications Express 2004Q2
Date of Resolved Release
A security vulnerability in the Sun Java Communications Express software may allow a local or remote unprivileged user the ability to read the Communications Express application configuration files which contain sensitive information.
This issue can occur in the following releases:
To determine if the system is impacted by this issue, the following command can be run to see if the SUNWuwc package is installed:
$ pkginfo SUNWuwc
There are no predictable symptoms that would indicate the described vulnerability has been exploited.
There is no workaround to this issue. Please see the Resolution section below.
This issue is addressed in the following releases:
This solution has no attachment