CVE Vulnerabilities

CVE-2004-1757

Published: Dec 31, 2004 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users to gain privileges.

Affected Software

Name Vendor Start Version End Version
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 8.1 8.1
Weblogic_server Bea 8.1 8.1
Weblogic_server Bea 8.1 8.1
Weblogic_server Bea 8.1 8.1
Weblogic_server Bea 8.1 8.1
Weblogic_server Bea 8.1 8.1
Weblogic_server Bea 8.1 8.1
Weblogic_server Bea 8.1 8.1
Weblogic_server Bea 8.1 8.1

References