Lucene search
HistoryJan 23, 2007 - 12:28 a.m.
CVE-2007-0409
cve-2007-0409
bea weblogic
vulnerability
password encryption
nvd
6.2 Medium
AI Score
Confidence
Low
1.5 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
30.1%
BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9.0 initial release does not encrypt passwords stored in the JDBCDataSourceFactory MBean Properties, which allows local administrative users to read the cleartext password.
Related
prion
prion
Default credentials
2007-01-23 00:28:00
securityvulns
securityvulns
BEA Weblogic application server multiple vulnerabilities
2006-01-24 00:00:00
6.2 Medium
AI Score
Confidence
Low
1.5 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
30.1%
Related for CVE-2007-0409