Description
stopWebLogic.sh in BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6 displays the administrator password to stdout when executed, which allows local users to obtain the password by viewing a local display.
References
- 20130 third-party-advisory
- BEA06-121.00 vendor-advisory
- ADV-2006-1828 vdb-entry
- weblogic-stopweblogic-password-disclosure(26467) vdb-entry
- 1016094 vdb-entry