Skip to content
OpenAdvisories
Unscored CVE-2003-1226 EUVD-2003-1216GHSA-vcq6-c6fh-vhfh

BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores certain secrets concerning password encryption insecurely in config.xml, filerealm.p…

Published Aug 16, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores certain secrets concerning password encryption insecurely in config.xml, filerealm.properties, and weblogic-rar.xml, which allows local users to learn those secrets and decrypt passwords.

References