medium4.6
CVE-2004-1757
BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users to gain privileges.
Impact
BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users to gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bea | Weblogic Server | Versions 6.1, 7.0, 8.1 |
References
- NVD record
- CVE.org record
- http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_50.00.jsp
- http://secunia.com/advisories/10728
- http://www.kb.cert.org/vuls/id/350350
- http://www.securityfocus.com/bid/9501
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14957
- http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_50.00.jsp
- http://secunia.com/advisories/10728
- http://www.kb.cert.org/vuls/id/350350
- http://www.securityfocus.com/bid/9501
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14957