← Database

CVE-2003-1447

LOW CVSS: 1.9 Published: 2003-12-31 Modified: 2026-06-16

Description

IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm (XOR and base64 encoding), which allows local users to decrypt passwords when the configuration file is exported to XML.

Affected Platforms

Ibm Websphere Application Server

Weakness Type

CWE-310

References