← Database

CVE-2007-5576

MEDIUM CVSS: 6.8 Published: 2007-10-18 Modified: 2026-06-16

Description

BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands.

Affected Platforms

Bea Weblogic WorkshopBea Weblogic ServerOracle Weblogic PortalBea TuxedoBea Weblogic Integration

Weakness Type

CWE-200

References