CVE-2007-5576

medium

Description

BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/34290

http://www.vupen.com/english/advisories/2007/1813

http://osvdb.org/45478

http://dev2dev.bea.com/pub/advisory/226

Details

Source: Mitre, NVD

Published: 2007-10-18

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 4.6

Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Severity: Medium

EPSS

EPSS: 0.00602