VulnerabilityModified

CVE-2003-1225

The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords.

LOW 2.1EPSS 0.40%

Does this matter?

Lower severity and a low EPSS score (0.40%). Track it; it rarely justifies an emergency change on its own.

Description

The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords.

CVSS 2.0: 2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
EPSS: 0.40% probability · 33th percentile
CISA KEV: Not listed
Affected: bea/weblogic server
Source: cve@mitre.org

References

http://dev2dev.bea.com/pub/advisory/22
http://www.securityfocus.com/bid/7563Patch
http://dev2dev.bea.com/pub/advisory/22
http://www.securityfocus.com/bid/7563Patch

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.