CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 8050 | CVE-2003-1226 | Candidate | BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores certain secrets concerning password encryption insecurely in config.xml, filerealm.properties, and weblogic-rar.xml, which allows local users to learn those secrets and decrypt passwords. | Assigned (20050816) | None (candidate not yet proposed) | View | |
| 8049 | CVE-2003-1225 | Candidate | The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords. | Assigned (20050816) | None (candidate not yet proposed) | View | |
| 8048 | CVE-2003-1224 | Candidate | Weblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the JDBCConnectionPoolRuntimeMBean password to the screen in cleartext, which allows attackers to read a user"s password by physically observing ("shoulder surfing") the screen. | Assigned (20050816) | None (candidate not yet proposed) | View | |
| 8047 | CVE-2003-1223 | Candidate | The Node Manager for BEA WebLogic Express and Server 6.1 through 8.1 SP 1 allows remote attackers to cause a denial of service (Node Manager crash) via malformed data to the Node Manager"s port, as demonstrated by nmap. | Assigned (20050816) | None (candidate not yet proposed) | View | |
| 8046 | CVE-2003-1222 | Candidate | BEA Weblogic Express and Server 8.0 through 8.1 SP 1, when using a foreign Java Message Service (JMS) provider, echoes the password for the foreign provider to the console and stores it in cleartext in config.xml, which could allow attackers to obtain the password. | Assigned (20050816) | None (candidate not yet proposed) | View |
Page 19334 of 20943, showing 5 records out of 104715 total, starting on record 96666, ending on 96670
