Lucene search
HistoryMay 16, 2007 - 1:19 a.m.
CVE-2007-2700
cve-2007-2700
nvd
bea weblogic
wlst
configtoscript
information security
encryption
remote user
sensitive information
6.8 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
76.7%
The WLST script generated by the configToScript command in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not encrypt certain attributes in configuration files when creating a new domain, which allows remote authenticated users to obtain sensitive information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| bea:weblogic_server | bea weblogic server | eq | 9.0 |
| bea:weblogic_server | bea weblogic server | eq | 9.1 |
6.8 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
76.7%
Related for CVE-2007-2700