Ciscoworks LMS 2.6 & Java Requirement/Vulnerability

[sirbaughmf]

We are seeing a vulnerability against the version of Java (1.4.2_10) that is required for LMS 2.6. Does Cisco have a recommendation for limiting this vulnerablity. Below is the link to Sun....

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103112-1

thanks,Marcie

[Joe Clarke]

We are not vulnerable to this per se as we do not ship malicious applets. However, we are investigating the impact of a 1.4.2_16 update (currently we support 1.4.2_15 as of LMS 2.6 SP1).

[sirbaughmf]

Ok, I'll wait to hear about _16 impact.

thanks, Marcie