Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The WLST script generated by the configToScript command in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not encrypt certain attributes in configuration files when creating a new domain, which allows remote authenticated users to obtain sensitive information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BEA WebLogic Express和WebLogic Server WLST脚本信息泄露漏洞
Vulnerability Description
当创建一个新域时，由BEA WebLogic Express和WebLogic Server 的configToScript指令生成的WLST脚本没有为配置文件中的特定属性进行加密，这使得远程认证用户可以获得敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A