Unscored CVE-2004-2321 EUVD-2004-2313GHSA-293h-rg6q-5hxj

BEA WebLogic Server and Express 8.1 SP1 and earlier allows local users in the Operator role to obtain administrator passwords via MBean att…

Published Aug 16, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

BEA WebLogic Server and Express 8.1 SP1 and earlier allows local users in the Operator role to obtain administrator passwords via MBean attributes, including (1) ServerStartMBean.Password and (2) NodeManagerMBean.CertificatePassword.

References

weblogic-operator-gain-access(14962) vdb-entry
9505 vdb-entry
BEA04-49.00 vendor-advisory
1008867 vdb-entry