1. Home
  2. CVE Database
  3. CVE-2003-1225
LOW · 2.1

CVE-2003-1225

The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords.

Vulnerability Description

The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords.

CVSS Score

2.1

LOW

AV:L/AC:L/Au:N/C:P/I:N/A:N
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
BeaWeblogic Server7.0

References

FAQ

What is CVE-2003-1225?

CVE-2003-1225 is a vulnerability with a CVSS score of 2.1 (LOW). The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords.

How severe is CVE-2003-1225?

CVE-2003-1225 has been rated LOW with a CVSS base score of 2.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2003-1225?

Check the references section above for vendor advisories and patch information. Affected products include: Bea Weblogic Server.