2.1

CVE-2003-1437

BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key or trust certificate authorities, which allows local users to gain access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bea ≫ Weblogic Server Version 7.0 Edition express
   Hp ≫ Hp-ux Version 11.00
   Hp ≫ Hp-ux Version 11.11i Update v1
   Ibm ≫ Aix Version 4.3.3
   Microsoft ≫ Windows 2000
   Microsoft ≫ Windows Nt
   Redhat ≫ Linux Version 6.2 Edition i386
   Redhat ≫ Linux Version 7.1 Edition i386
   Sun ≫ Solaris Version 2.6
   Sun ≫ Sunos Version 5.7
   Sun ≫ Sunos Version 5.8
Bea ≫ Weblogic Server Version 7.0 Update sp1 Edition express
   Hp ≫ Hp-ux Version 11.00
   Hp ≫ Hp-ux Version 11.11i Update v1
   Ibm ≫ Aix Version 4.3.3
   Microsoft ≫ Windows 2000
   Microsoft ≫ Windows Nt
   Redhat ≫ Linux Version 6.2 Edition i386
   Redhat ≫ Linux Version 7.1 Edition i386
   Sun ≫ Solaris Version 2.6
   Sun ≫ Sunos Version 5.7
   Sun ≫ Sunos Version 5.8
Bea ≫ Weblogic Server Version 7.0.0.1 Edition express
   Hp ≫ Hp-ux Version 11.00
   Hp ≫ Hp-ux Version 11.11i Update v1
   Ibm ≫ Aix Version 4.3.3
   Microsoft ≫ Windows 2000
   Microsoft ≫ Windows Nt
   Redhat ≫ Linux Version 6.2 Edition i386
   Redhat ≫ Linux Version 7.1 Edition i386
   Sun ≫ Solaris Version 2.6
   Sun ≫ Sunos Version 5.7
   Sun ≫ Sunos Version 5.8
Bea ≫ Weblogic Server Version 7.0.0.1 Update sp1 Edition express
   Hp ≫ Hp-ux Version 11.00
   Hp ≫ Hp-ux Version 11.11i Update v1
   Ibm ≫ Aix Version 4.3.3
   Microsoft ≫ Windows 2000
   Microsoft ≫ Windows Nt
   Redhat ≫ Linux Version 6.2 Edition i386
   Redhat ≫ Linux Version 7.1 Edition i386
   Sun ≫ Solaris Version 2.6
   Sun ≫ Sunos Version 5.7
   Sun ≫ Sunos Version 5.8
Bea ≫ Weblogic Server Version 7.0
   Hp ≫ Hp-ux Version 11.00
   Hp ≫ Hp-ux Version 11.11i
   Ibm ≫ Aix Version 4.3.3
   Microsoft ≫ Windows 2000
   Microsoft ≫ Windows Nt
   Redhat ≫ Linux Version 6.2 Edition i386
   Redhat ≫ Linux Version 7.1 Edition i386
   Sun ≫ Solaris Version 2.6
   Sun ≫ Sunos Version 5.7
   Sun ≫ Sunos Version 5.8
Bea ≫ Weblogic Server Version 7.0 Update sp1
   Hp ≫ Hp-ux Version 11.00
   Hp ≫ Hp-ux Version 11.11i
   Ibm ≫ Aix Version 4.3.3
   Microsoft ≫ Windows 2000
   Microsoft ≫ Windows Nt
   Redhat ≫ Linux Version 6.2 Edition i386
   Redhat ≫ Linux Version 7.1 Edition i386
   Sun ≫ Solaris Version 2.6
   Sun ≫ Sunos Version 5.7
   Sun ≫ Sunos Version 5.8
Bea ≫ Weblogic Server Version 7.0.0.1
   Hp ≫ Hp-ux Version 11.00
   Hp ≫ Hp-ux Version 11.11i
   Ibm ≫ Aix Version 4.3.3
   Microsoft ≫ Windows 2000
   Microsoft ≫ Windows Nt
   Redhat ≫ Linux Version 6.2 Edition i386
   Redhat ≫ Linux Version 7.1 Edition i386
   Sun ≫ Solaris Version 2.6
   Sun ≫ Sunos Version 5.7
   Sun ≫ Sunos Version 5.8
Bea ≫ Weblogic Server Version 7.0.0.1 Update sp1
   Hp ≫ Hp-ux Version 11.00
   Hp ≫ Hp-ux Version 11.11i
   Ibm ≫ Aix Version 4.3.3
   Microsoft ≫ Windows 2000
   Microsoft ≫ Windows Nt
   Redhat ≫ Linux Version 6.2 Edition i386
   Redhat ≫ Linux Version 7.1 Edition i386
   Sun ≫ Solaris Version 2.6
   Sun ≫ Sunos Version 5.7
   Sun ≫ Sunos Version 5.8
Bea ≫ Weblogic Server Version 7.0
Bea ≫ Weblogic Server Version 7.0 Update sp1
Bea ≫ Weblogic Server Version 7.0.0.1
Bea ≫ Weblogic Server Version 7.0.0.1 Update sp1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.117
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-25.jsp
Patch
Vendor Advisory
http://www.securityfocus.com/bid/6719
https://exchange.xforce.ibmcloud.com/vulnerabilities/11220