Lucene search
MitreCVELIST:CVE-2005-4755HistoryApr 01, 2006 - 2:00 a.m.
CVE-2005-4755
2006-04-0102:00:00
mitre
www.cve.org
3
bea weblogic server
cleartext
private key passphrase
storage
security issue
cryptographic keys
BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier (1) stores the private key passphrase (CustomTrustKeyStorePassPhrase) in cleartext in nodemanager.config; or, during domain creation with the Configuration Wizard, renders an SSL private key passphrase in cleartext (2) on a terminal or (3) in a log file, which might allow local users to obtain cryptographic keys.
