Java information to be controlled by a user right. (4327826)

The Help | Java pull down option not only identified the java release (OK) but also identified by specific location (on the application server) where the java JRE package is located.  The release of the very specific location on the server of the Java “JRE” package allows an attacker to target the directory for manipulation/deletion that would then severely impact the security operation of the java client installed on the system.

STATUS:

Enhancement request CR0236073 has been submitted to Development for consideration in future release of Stat