Vulnerability Description
Weblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the JDBCConnectionPoolRuntimeMBean password to the screen in cleartext, which allows attackers to read a user's password by physically observing ("shoulder surfing") the screen.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bea | Weblogic Server | 7.0 |
References
- http://dev2dev.bea.com/pub/advisory/22
- http://www.securityfocus.com/bid/7563Patch
- http://dev2dev.bea.com/pub/advisory/22
- http://www.securityfocus.com/bid/7563Patch
FAQ
What is CVE-2003-1224?
CVE-2003-1224 is a vulnerability with a CVSS score of 2.1 (LOW). Weblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the JDBCConnectionPoolRuntimeMBean password to the screen in cleartext, which allows attackers to read a user's password by ...
How severe is CVE-2003-1224?
CVE-2003-1224 has been rated LOW with a CVSS base score of 2.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2003-1224?
Check the references section above for vendor advisories and patch information. Affected products include: Bea Weblogic Server.