CVE-2006-0423

Description

BEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in cleartext in the config.xml file, which allows attackers to gain privileges.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/40705

https://exchange.xforce.ibmcloud.com/vulnerabilities/24284

http://www.vupen.com/english/advisories/2008/0613

http://www.vupen.com/english/advisories/2006/0312

http://www.securityfocus.com/bid/16358

http://securitytracker.com/id?1015528

http://secunia.com/advisories/18593

http://dev2dev.bea.com/pub/advisory/262

http://dev2dev.bea.com/pub/advisory/167

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS