CVE-2007-0409 — Weblogic Server vulnerability

3 documents3 sources
Severity
1.5LOWNVD
EPSS
0.1%
top 77.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
BEA Weblogic Server
Timeline
PublishedJan 23
Latest updateMay 1

Description

BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9.0 initial release does not encrypt passwords stored in the JDBCDataSourceFactory MBean Properties, which allows local administrative users to read the cleartext password.

CVSS vector

AV:L/AC:M/C:P/I:N/A:NExploitability: 2.7 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: dev2dev.bea.com ↗Patch: dev2dev.bea.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-57cv-vqcj-8px9: BEA WebLogic 7↗2022-05-01
▶
CVEList
CVE-2007-0409: BEA WebLogic 7↗2007-01-23
▶
CVE-2007-0409 — BEA Weblogic Server vulnerability | cvebase