CVE Vulnerabilities

CVE-2003-1225

Published: Dec 31, 2003 | Modified: Sep 10, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords.

Affected Software

Name Vendor Start Version End Version
Weblogic_server Bea 7.0 (including) 7.0 (including)
Weblogic_server Bea 7.0-sp1 (including) 7.0-sp1 (including)
Weblogic_server Bea 7.0-sp2 (including) 7.0-sp2 (including)
Weblogic_server Bea 7.0-sp4 (including) 7.0-sp4 (including)
Weblogic_server Bea 7.0.0.1 (including) 7.0.0.1 (including)
Weblogic_server Bea 7.0.0.1-sp1 (including) 7.0.0.1-sp1 (including)
Weblogic_server Bea 7.0.0.1-sp2 (including) 7.0.0.1-sp2 (including)

References