CVE-2007-0409 | BDVDB-2026-21756 Detail

Description#

BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9.0 initial release does not encrypt passwords stored in the JDBCDataSourceFactory MBean Properties, which allows local administrative users to read the cleartext password.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://dev2dev.bea.com/pub/advisory/203
http://securitytracker.com/id?1017525
http://secunia.com/advisories/23750
http://www.securityfocus.com/bid/22082
http://osvdb.org/38501
http://www.vupen.com/english/advisories/2007/0213

Exploit#

No public exploit known

History#

Version 12007-01-23Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.