Vulnerability in Bea Weblogic Server
CVE-2003-1437
BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key or trust certificate authorities, which allows local users to gain access.
EPSS: 0.002 (12.1th percentile) — read the EPSS interpretation.
Affected products
- Bea Weblogic_server — versions 7.0, 7.0.0.1
- Hp Hp-ux — versions 11.00, 11.11i
- Ibm Aix — versions 4.3.3
- Microsoft Windows_2000
- Microsoft Windows_nt
- Sun Solaris — versions 2.6
- Sun Sunos — versions 5.7, 5.8
- Redhat Linux — versions 6.2, 7.1
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, x_refsource_BEA, Patch, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)