CVE-2006-0423

BEA WebLogic Portal 8.1 through SP3 stores the RDBMS Authentication provider password in cleartext in config.xml, allowing privilege escalation. Affected component: WebLogic Portal configuration for RDBMS auth. Root cause: cleartext password storage in config.xml. Impact: partial confidentiality ...

CVE-2006-0423: Undefined Security Weakness

BEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in cleartext in the config.xml file, which allows attackers to gain privileges...

[SA18593] BEA WebLogic Portal Information Disclosure and Security Bypass

TITLE: BEA WebLogic Portal Information Disclosure and Security Bypass SECUNIA ADVISORY ID: SA18593 VERIFY ADVISORY: http://secunia.com/advisories/18593/ CRITICAL: Moderately critical IMPACT: Security Bypass, Exposure of system information, Exposure of sensitive information WHERE: From remote...

Multiple SQL Injection Vulnerabilities in Oracle Application Server 9i and RDBMS (#NISR05112003)

NGSSoftware Insight Security Research Advisory Name : Multiple Oracle Application Server SQL Injection Vulnerabilities Systems Affected: All OS platforms; Oracle9i Application Server Release 1 and 2 and RDBMS Severity : High Risk Vendor URL : http://www.oracle.com/ Author : David Litchfield...

Advisory: Lawson Financials RDBMS Insecurity

+-----------------------------------------------------------------------+ | Advisory: lawson001 | | Authors: John Eisenschmidt [email protected] | | George Lewis [email protected] | | Release Date: December 02, 2002 | | Vendor: Lawson | | Application: Financials possibly others | | Affected...