CVE Vulnerabilities

CVE-2003-1225

Published: Dec 31, 2003 | Modified: Nov 20, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords.

Affected Software 

Name Vendor Start Version End Version
Weblogic_server Bea 7.0 (including) 7.0 (including)
Weblogic_server Bea 7.0-sp1 (including) 7.0-sp1 (including)
Weblogic_server Bea 7.0-sp2 (including) 7.0-sp2 (including)
Weblogic_server Bea 7.0-sp4 (including) 7.0-sp4 (including)
Weblogic_server Bea 7.0.0.1 (including) 7.0.0.1 (including)
Weblogic_server Bea 7.0.0.1-sp1 (including) 7.0.0.1-sp1 (including)
Weblogic_server Bea 7.0.0.1-sp2 (including) 7.0.0.1-sp2 (including)

References