CVE-2003-1447

2007-10-2301:00:00

mitre

www.cve.org

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm (XOR and base64 encoding), which allows local users to decrypt passwords when the configuration file is exported to XML.

References

securityreason.com/securityalert/3277

www.securityfocus.com/archive/1/310118

www.securityfocus.com/archive/1/310796

www.securityfocus.com/bid/6758

exchange.xforce.ibmcloud.com/vulnerabilities/11245