Skip to content
OpenAdvisories
Unscored CVE-2003-1224 EUVD-2003-1214GHSA-qp67-ccp4-w9jv

Weblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the JDBCConnectionPoolRuntimeMBean password to the screen in cl…

Published Aug 16, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Weblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the JDBCConnectionPoolRuntimeMBean password to the screen in cleartext, which allows attackers to read a user's password by physically observing ("shoulder surfing") the screen.

References