← Database

CVE-2004-1757

MEDIUM CVSS: 4.6 Published: 2004-12-31 Modified: 2026-06-16

Description

BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users to gain privileges.

Affected Platforms

Bea Weblogic Server

Weakness Type

NVD-CWE-Other

References