| Package | Affected versions | Patched versions |
|---|---|---|
| weblogic server | = 8.1 |
BEA WebLogic Server and WebLogic Express 8.1 through SP4, when configuration auditing is enabled and a password change occurs, stores the old and new passwords in cleartext in the DefaultAuditRecorder.log file, which could allow attackers to gain privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free