← Database

CVE-2006-0423

HIGH CVSS: 7.5 Published: 2006-01-25 Modified: 2026-06-16

Description

BEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in cleartext in the config.xml file, which allows attackers to gain privileges.

Affected Platforms

Oracle Weblogic Portal

Weakness Type

NVD-CWE-Other

References