CVE-2003-1447 in WebSphere Application Server

Summary

IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm (XOR and base64 encoding), which allows local users to decrypt passwords when the configuration file is exported to XML.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 10/22/2007
• Disclosure: 12/31/2003
• Moderation: VulDB entry created
• Entries: VDB-21366 (1)
• CPE: ready
• CWE: CWE-310 (Confirmed)
• CVSS: 4.0
• EPSS: 0.00038
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-1447
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-1447
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-1447/