CVE-2007-2700 in WebLogic Server
Summary
The WLST script generated by the configToScript command in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not encrypt certain attributes in configuration files when creating a new domain, which allows remote authenticated users to obtain sensitive information.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
05/15/2007
Disclosure
05/15/2007
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 36821 | BEA WebLogic Server Configuration File information disclosure | 200 | Proof-of-Concept | Not defined | CVE-2007-2700 |