CVE-2003-1225: Low severity Bea WebLogic Server vulnerability
Published Dec 31, 2003
·Updated
The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords.
Affected Software
19 affected components
Bea WebLogic Server=7.0-sp2
Bea WebLogic Server=7.0
Bea WebLogic Server=7.0.0.1-sp1
Bea WebLogic Server=7.0.0.1-sp1
Bea WebLogic Server=7.0-sp2
Bea WebLogic Server=7.0.0.1
Bea WebLogic Server=7.0.0.1-sp1
Bea WebLogic Server=7.0.0.1
Bea WebLogic Server=7.0-sp2
Bea WebLogic Server=7.0.0.1-sp2
Bea WebLogic Server=7.0.0.1-sp2
Bea WebLogic Server=7.0
Bea WebLogic Server=7.0
Bea WebLogic Server=7.0.0.1
Bea WebLogic Server=7.0-sp4
Bea WebLogic Server=7.0.0.1-sp2
Bea WebLogic Server=7.0-sp1
Bea WebLogic Server=7.0-sp1
Bea WebLogic Server=7.0-sp1
Remediation
Patch Available
Event History
Dec 31, 2003
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Aug 16, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-1225?
CVE-2003-1225 is classified as a medium severity vulnerability due to the exposure of cleartext passwords.
2
How do I fix CVE-2003-1225?
To fix CVE-2003-1225, you should upgrade to a version of WebLogic Server that addresses this vulnerability.
3
Which versions of WebLogic Server are affected by CVE-2003-1225?
CVE-2003-1225 affects BEA WebLogic Server and Express versions 7.0 and 7.0.0.1, including all service packs up to 7.0-sp4.
4
Can CVE-2003-1225 be exploited remotely?
CVE-2003-1225 requires local access to the system to exploit the stored passwords in cleartext.
5
What impact does CVE-2003-1225 have on security?
The impact of CVE-2003-1225 includes potential unauthorized access to sensitive data due to the exposure of credentials in cleartext.