CVE-2004-1757

CVE-2004-1757

EPSS 0.4%

BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users to gain privileges.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_50.00.jsp http://secunia.com/advisories/10728 https://exchange.xforce.ibmcloud.com/vulnerabilities/14957 http://www.kb.cert.org/vuls/id/350350 http://www.securityfocus.com/bid/9501