Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users to gain privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BEA WebLogic Operator/Admin密码泄露漏洞
Vulnerability Description
BEA Systems WebLogic包含多种应用系统集成方案，包括Server/Express/Integration等。 BEA Systems WebLogic存在操作员或管理员密码泄露问题，本地攻击者可以利用这个漏洞未授权访问系统。 当节点管理器尝试启动管理服务，并且在启动过程中管理服务器失败情况下，用于启动管理服务器的用户名和密码会以明文方式存放在文件系统中。攻击者可以使管理服务器启动过程中进行攻击，可获得启动用户名和密码。
CVSS Information
N/A
Vulnerability Type
N/A