| Package | Affected versions | Patched versions |
|---|---|---|
| weblogic server | = 7.0= 7.0.0.1 |
The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free