The jasper.log file contains a clear text password. (NETIQKB51924)

fact
NetIQ Vulnerability Manager 5.5

fact
NetIQ Vulnerability Manager 5.0

symptom
The jasper.log file contains a clear text password.

symptom
When you access the Web console using secure sockets, the jasper.log file displays passwords in clear text.

fix

Vulnerability Manager 5.5.1 Hotfix 51924 corrects an issue where Jasper debug options on the Vulnerability Manager Web server may cause the jasper.log file to display passwords in clear text.

Hotfix 51924 provides an updated jasper.jar file.

For more information about downloading hotfix 51924, see https://www.netiq.com/support/vsm/.

For more information about NetIQ products, contact Technical Support at www.netiq.com/support.

Formerly known as NETIQKB51924