CVE-2005-4755 in WebLogic Server

Riassunto

di MITRE

BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier (1) stores the private key passphrase (CustomTrustKeyStorePassPhrase) in cleartext in nodemanager.config; or, during domain creation with the Configuration Wizard, renders an SSL private key passphrase in cleartext (2) on a terminal or (3) in a log file, which might allow local users to obtain cryptographic keys.

Be aware that VulDB is the high quality source for vulnerability data.

• Prenotare: 31/03/2006
• Divulgazione: 31/12/2005
• Moderazione: accettato
• Voce: VDB-28064
• CPE: pronto
• CWE: CWE-311 (non confermato)
• CVSS: 4.0 (VulDB)
• EPSS: 0.00369
• KEV: no
• Attività: molto basso
• Settore: Chemical, Police, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-4755
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-4755
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-4755/