CVE-2004-1757: Medium severity Bea WebLogic Server vulnerability
BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users to gain privileges.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1757?
The severity of CVE-2004-1757 is considered high due to the exposure of administrator passwords in cleartext leading to potential privilege escalation.
How do I fix CVE-2004-1757?
To mitigate CVE-2004-1757, it's critical to upgrade BEA WebLogic Server and Express to a version that properly secures administrator passwords.
What versions of WebLogic Server are affected by CVE-2004-1757?
CVE-2004-1757 affects BEA WebLogic Server versions 6.1, 7.0, and 8.1 including various service packs.
Who is impacted by CVE-2004-1757?
Local users on systems running the affected versions of WebLogic Server can exploit CVE-2004-1757 to gain elevated privileges.
What are the potential consequences of CVE-2004-1757?
The exploitation of CVE-2004-1757 can lead to unauthorized access and control over the WebLogic Server by exposing sensitive password information.