CVE-2003-1225 — Weblogic Server vulnerability

3 documents3 sources
Severity
2.1LOWNVD
EPSS
0.1%
top 82.80%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
BEA Weblogic Server
Timeline
PublishedDec 31
Latest updateApr 29

Description

The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords.

CVSS vector

AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

▶NVDbea/weblogic_server7.0, 7.0.0.1+1

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-x2rx-gr2q-pc8q: The default CredentialMapper for BEA WebLogic Server and Express 7↗2022-04-29
▶
CVEList
CVE-2003-1225: The default CredentialMapper for BEA WebLogic Server and Express 7↗2005-08-16
▶
CVE-2003-1225 — BEA Weblogic Server vulnerability | cvebase