Description
BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key or trust certificate authorities, which allows local users to gain access.
References
- BEA03-25.00 vendor-advisory
- 6719 vdb-entry
- weblogic-keystore-plaintext-passwords(11220) vdb-entry