CVE-2003-1437 BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key or trust certificate authorities, which allows local users to gai...
LowCVSS 2.1
EPSS 0.22%
- Published
- Updated
- Exploit status
- No public exploit known
Description
BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key or trust certificate authorities, which allows local users to gain access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bea weblogic server | = 7.0 | No fix listed |
| bea weblogic server | = 7.0-sp1 | No fix listed |
| bea weblogic server | = 7.0.0.1 | No fix listed |
| bea weblogic server | = 7.0.0.1-sp1 | No fix listed |
References
- BEA03-25.00 patch vendor-advisory
- 6719 vdb-entry
- weblogic-keystore-plaintext-passwords(11220) vdb-entry