VULNERABILITY INTELLIGENCE

CVE-2007-0409

CVSS score1.5 LOW
EPSS probability0.29%
CISA KEVNot currently listed
Published2007-01-23
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:S/C:P/I:N/A:N

Description

BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9.0 initial release does not encrypt passwords stored in the JDBCDataSourceFactory MBean Properties, which allows local administrative users to read the cleartext password.

Primary references