BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9.0 initial release does not encrypt passwords stored in the JDBCDataSourceFactory MBean Properties, which allows local administrative users to read the cleartext password.
Tuesday 23rd of January 2007
Tuesday 8th of March 2011
Find out if you have vulnerabilities exposing you to hackers and malware: Download Mageni's Free Edition
Mageni provides a free vulnerability scanning and management platform which helps you need to find, prioritize, remediate and manage your vulnerabilities.