← Database

CVE-2007-0409

LOW CVSS: 1.5 Published: 2007-01-23 Modified: 2026-06-16

Description

BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9.0 initial release does not encrypt passwords stored in the JDBCDataSourceFactory MBean Properties, which allows local administrative users to read the cleartext password.

Affected Platforms

Bea Weblogic Server

Weakness Type

NVD-CWE-Other

References