4
CVE-2007-2700
- EPSS 1.71%
- Veröffentlicht 16.05.2007 01:19:00
- Zuletzt bearbeitet 16.06.2026 22:40:08
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginThe WLST script generated by the configToScript command in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not encrypt certain attributes in configuration files when creating a new domain, which allows remote authenticated users to obtain sensitive information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bea ≫ Weblogic Server Version9.0
Bea ≫ Weblogic Server Version9.0 Editionexpress
Bea ≫ Weblogic Server Version9.1
Bea ≫ Weblogic Server Version9.1 Editionexpress
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.71% | 0.744 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:N
|
http://secunia.com/advisories/25284
http://www.vupen.com/english/advisories/2007/1815
http://securitytracker.com/id?1018057
http://dev2dev.bea.com/pub/advisory/233
http://osvdb.org/36068
https://exchange.xforce.ibmcloud.com/vulnerabilities/34288