BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T15:39:13.505Z
Reserved: 2007-10-18T00:00:00
Link: CVE-2007-5576

No data.

Status : Deferred
Published: 2007-10-18T21:17:00.000
Modified: 2025-04-09T00:30:58.490
Link: CVE-2007-5576

No data.