CVE-2004-1757

Medium

4.6/10

Summary

BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users to gain privileges.

Access Complexity: LOW
AccessVector: LOCAL
Authentication: NONE
Integrity Impact: PARTIAL
Confidentiality Impact: PARTIAL
Availability Impact: PARTIAL

References

Advisory Timeline

Published Dec 31, 2004

CVE-2004-1757

Summary

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS