CVE-2007-0409

CVE-2007-0409 affects BEA WebLogic Server versions 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9.0 initial release. The issue is that passwords stored in the JDBCDataSourceFactory MBean Properties are not encrypted, allowing a local administrator to read cleartext passwords. The provided docume...