1.5
CVE-2007-0409
- EPSS 0.28%
- Veröffentlicht 23.01.2007 00:28:00
- Zuletzt bearbeitet 16.06.2026 22:35:30
- Erkennungen
LoginBEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9.0 initial release does not encrypt passwords stored in the JDBCDataSourceFactory MBean Properties, which allows local administrative users to read the cleartext password.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bea ≫ Weblogic Server Update sp6 Version <= 7.0
Bea ≫ Weblogic Server Update sp4 Version <= 8.1
Bea ≫ Weblogic Server Version 7.0
Bea ≫ Weblogic Server Version 8.1
Bea ≫ Weblogic Server Version 9.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.28% | 0.199 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 1.5 | 2.7 | 2.9 |
AV:L/AC:M/Au:S/C:P/I:N/A:N
|
http://secunia.com/advisories/23750
http://www.securityfocus.com/bid/22082
http://www.vupen.com/english/advisories/2007/0213
http://dev2dev.bea.com/pub/advisory/203
http://osvdb.org/38501
http://securitytracker.com/id?1017525