{"vuid":"VU#920238","idnumber":"920238","name":"BEA WebLogic Server stores database password in clear text in \"config.xml\"","keywords":["BEA Weblogic Server","clear text","database password","config.xml","JDBC connection pool","BEA04-53.00"],"overview":"WebLogic Server contains a vulnerability that may expose the database username and password in clear text in the config.xml file.","clean_desc":"BEA Systems describes WebLogic Server as \"an industrial-strength application infrastructure for developing, integrating, securing, and managing distributed Java applications.\" There is a vulnerability in the WebLogic Server that may expose the database username and password for untargeted JDBC connection pools. Under certain circumstances, the database username and password may be stored in clear text within the config.xml file. According to the BEA Security Advisory, this vulnerability occurs under the following circumstances: When a JDBC connection pool is not targeted to a server yet has a database username and password configured for it. When a JDBC connection pool has been untargeted from all servers and has subsequently had the password changed. The BEA Security Advisory states that the following versions of WebLogic Server and Express are affected by this vulnerability: WebLogic Server and WebLogic Express version 8.1 through Service Pack 2, on all platforms \nWebLogic Server and WebLogic Express version 7.0 through Service Pack 4, on all platforms \nWebLogic Server and WebLogic Express version 6.1 through Service Pack 6, on all platforms","impact":"A user with access to the config.xml file may acquire the database username and password. The user could subsequently use this password to access the database.","resolution":"Upgrade\nBEA has released an advisory to address this issue. According to the BEA Security Advisory, it is recommended that users take the following action: WebLogic Server and WebLogic Express version 8.1 1. Upgrade to WebLogic Server and WebLogic Express version 8.1 Service Pack 2. 2. Install the patch from: ftp://ftpna.beasys.com/pub/releases/security/CR128888_81sp2.jar WebLogic Server version 8.1 Service Pack 3 will include the functionality in this patch. WebLogic Server and WebLogic Express version 7.0 Upgrade to WebLogic Server and WebLogic Express version 7.0 Service Pack 5. WebLogic Server and WebLogic Express version 6.1 1. Upgrade to WebLogic Server and WebLogic Express version 6.1 Service Pack 6 2. Install the patch from: ftp://ftpna.beasys.com/pub/releases/security/CR128888_61sp6.jar WebLogic Server version 6.1 Service Pack 7 will include the functionality in this patch.","workarounds":"","sysaffected":"","thanks":"This vulnerability was reported by BEA Systems Inc.","author":"This document was written by Damon Morda.","public":["http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_53.00.jsp","http://secunia.com/advisories/11357/","http://securitytracker.com/alerts/2004/Apr/1009764.html","http://edocs.bea.com/wls/docs61/adminguide/jdbc.html#1097203","http://edocs.bea.com/wls/docs61/jdbc/programming.html#programming001"],"cveids":[""],"certadvisory":"","uscerttechnicalalert":null,"datecreated":"2004-04-16T13:43:46Z","publicdate":"2004-04-14T00:00:00Z","datefirstpublished":"2004-04-19T15:36:47Z","dateupdated":"2004-04-19T16:03:02Z","revision":14,"vrda_d1_directreport":"","vrda_d1_population":"","vrda_d1_impact":"","cam_widelyknown":"15","cam_exploitation":"0","cam_internetinfrastructure":"7","cam_population":"9","cam_impact":"8","cam_easeofexploitation":"20","cam_attackeraccessrequired":"10","cam_scorecurrent":"5.94","cam_scorecurrentwidelyknown":"7.29","cam_scorecurrentwidelyknownexploited":"12.69","ipprotocol":"","cvss_accessvector":"","cvss_accesscomplexity":"","cvss_authentication":null,"cvss_confidentialityimpact":"","cvss_integrityimpact":"","cvss_availabilityimpact":"","cvss_exploitablity":null,"cvss_remediationlevel":"","cvss_reportconfidence":"","cvss_collateraldamagepotential":"","cvss_targetdistribution":"","cvss_securityrequirementscr":"","cvss_securityrequirementsir":"","cvss_securityrequirementsar":"","cvss_basescore":"","cvss_basevector":"","cvss_temporalscore":"","cvss_environmentalscore":"","cvss_environmentalvector":"","metric":5.94,"vulnote":null}