Unscored CVE-2003-1447 EUVD-2003-1437GHSA-2753-chm6-qr3j

IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm (XOR and base64 encoding), which allows local users to decrypt…

Published Oct 23, 2007 · Updated Aug 8, 2024 · Assigned by mitre

Description

IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm (XOR and base64 encoding), which allows local users to decrypt passwords when the configuration file is exported to XML.

References

websphere-xml-weak-encryption(11245) vdb-entry
20030206 Re: Weak password protection in WebSphere 4.0.4 XML configuration export mailing-list
6758 vdb-entry
20030204 Weak password protection in WebSphere 4.0.4 XML configuration export mailing-list
3277 third-party-advisory