Lucene search
HistoryJan 23, 2007 - 12:28 a.m.
CVE-2007-0413
cve-2007-0413
bea weblogic
data storage
sensitive information
config.xml
offline editing
5.7 Medium
AI Score
Confidence
Low
4.4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%
BEA WebLogic Server 8.1 through 8.1 SP5 stores cleartext data in a backup of config.xml after offline editing, which allows local users to obtain sensitive information by reading this backup file.
Affected configurations
Node
beaweblogic_serverRange≤8.1sp5
ORbeaweblogic_serverMatch8.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| bea:weblogic_server | bea weblogic server | le | 8.1 |
Related
cvelist
cvelist
CVE-2007-0413
2007-01-23 00:00:00
prion
prion
Design/Logic Flaw
2007-01-23 00:28:00
nvd
nvd
CVE-2007-0413
2007-01-23 00:28:00
securityvulns
securityvulns
BEA Weblogic application server multiple vulnerabilities
2006-01-24 00:00:00
5.7 Medium
AI Score
Confidence
Low
4.4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2007-0413