CVE-2007-2698

Published: May 16, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Administration Console in BEA WebLogic Server 9.0 may show plaintext Web Service attributes during configuration creation, which allows remote attackers to obtain sensitive credential information.

Affected (1)

Products: Bea: Weblogic Server

Bea

1 product

Weblogic Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Bea Weblogic Server	Version 9.0

References (10)

http://dev2dev.bea.com/pub/advisory/230

Source: cve@mitre.org

PatchVendor Advisory

http://osvdb.org/36071

Source: cve@mitre.org

http://securitytracker.com/id?1018057

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1815

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34286

Source: cve@mitre.org

http://dev2dev.bea.com/pub/advisory/230