Weak Encryption Algorithm in IBM WebSphere Advanced Server Edition 4.0.4 Allows Password Decryption

CVE-2003-1447 · LOW Severity

AV:L/AC:M/AU:N/C:P/I:N/A:N

IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm (XOR and base64 encoding), which allows local users to decrypt passwords when the configuration file is exported to XML.

Learn more about our Cis Benchmark Audit For Ibm Websphere.