Description
The Administration Console in BEA WebLogic Server 9.0 may show plaintext Web Service attributes during configuration creation, which allows remote attackers to obtain sensitive credential information.
References
- 36071 vdb-entry
- 1018057 vdb-entry
- ADV-2007-1815 vdb-entry
- BEA07-162.00 vendor-advisory
- weblogic-config-information-disclosure(34286) vdb-entry