CVE-2007-2700

The WLST script generated by the configToScript command in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not encrypt certain attributes in…

published May 16, 2007

CVSS
—
EPSS
2%
Percentile
77.6
In the wild
Unconfirmed
What it is

The WLST script generated by the configToScript command in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not encrypt certain attributes in configuration files when creating a new domain, which allows remote authenticated users to obtain sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01747 · 77.6th percentile
Published
2007-05-16T01:00Z
EPSS history
Timeline
  • 16 MAY 01:00Z
    The WLST script generated by the configToScript command in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not encrypt certain attributes in…
    cvelistv5