1. Home
  2. CVE Database
  3. CVE-2003-1222
MEDIUM · 5.0

CVE-2003-1222

BEA Weblogic Express and Server 8.0 through 8.1 SP 1, when using a foreign Java Message Service (JMS) provider, echoes the password for the foreign provider to the console and stores it in cleartext i...

Vulnerability Description

BEA Weblogic Express and Server 8.0 through 8.1 SP 1, when using a foreign Java Message Service (JMS) provider, echoes the password for the foreign provider to the console and stores it in cleartext in config.xml, which could allow attackers to obtain the password.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
BeaWeblogic Server8.1

References

FAQ

What is CVE-2003-1222?

CVE-2003-1222 is a vulnerability with a CVSS score of 5.0 (MEDIUM). BEA Weblogic Express and Server 8.0 through 8.1 SP 1, when using a foreign Java Message Service (JMS) provider, echoes the password for the foreign provider to the console and stores it in cleartext i...

How severe is CVE-2003-1222?

CVE-2003-1222 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2003-1222?

Check the references section above for vendor advisories and patch information. Affected products include: Bea Weblogic Server.