Lucene search
PRIOn knowledge basePRION:CVE-2007-2700HistoryMay 16, 2007 - 1:19 a.m.
Information disclosure
2007-05-1601:19:00
PRIOn knowledge base
www.prio-n.com
1
6.6 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
76.5%
The WLST script generated by the configToScript command in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not encrypt certain attributes in configuration files when creating a new domain, which allows remote authenticated users to obtain sensitive information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| weblogic_server | eq | 9.0 | |
| weblogic_server | eq | 9.1 | |
| weblogic_server | eq | 9.0 express | |
| weblogic_server | eq | 9.1 express |
6.6 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
76.5%
Related for PRION:CVE-2007-2700