Plaintext Password Storage Vulnerability in BEA WebLogic Server 7.0 and 7.0.0.1

Plaintext Password Storage Vulnerability in BEA WebLogic Server 7.0 and 7.0.0.1

CVE-2003-1437 · LOW Severity

AV:L/AC:L/AU:N/C:N/I:P/A:N

BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key or trust certificate authorities, which allows local users to gain access.

Learn more about our Web App Pen Testing.