F-Secure PSB portal not working with Java 7

johan65

Hi!

 

 

I have noticed a problem using the web portal for F-Secure PSB with the new java 7 release.

Both IE and F-Fox stop working when java is started. Both are in the latest version and fully patched.

Have not test any other web browsers.

 

After uninstallation of Java 7 and installation of Java 6, everything works fine again.

etomcat

I wonder if it is a security vulnerability to use Windows OS standard Java with the web browser based PSB environment? Mikko never stops evangelizing about the immense dangers posed by having "full JRE" on desktop. In fact, for the case of FSPM, F-Secure does pack its own dumbed-down Java JRE to power the PMC console, so the attack surface is much reduced.

 

Besides the password-only login (no token, GSM SMS or scrath card support), use of commonplace JRE may be another big weakness of F-Secure PSB.