Vulnerability Details CVE-2004-2321
BEA WebLogic Server and Express 8.1 SP1 and earlier allows local users in the Operator role to obtain administrator passwords via MBean attributes, including (1) ServerStartMBean.Password and (2) NodeManagerMBean.CertificatePassword.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 8.2%
CVSS Severity
CVSS v2 Score 2.1
References
- http://dev2dev.bea.com/pub/advisory/1
- http://www.securityfocus.com/bid/9505
- http://www.securitytracker.com/alerts/2004/Jan/1008867.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14962
- http://dev2dev.bea.com/pub/advisory/1
- http://www.securityfocus.com/bid/9505
- http://www.securitytracker.com/alerts/2004/Jan/1008867.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14962
Products affected by CVE-2004-2321
-
cpe:2.3:a:bea:weblogic_server:8.1