CVE-2006-0423

BEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in cleartext in the config.xml file, which allows attackers to gain privileges.

Date published : 2006-01-25

http://dev2dev.bea.com/pub/advisory/167

http://dev2dev.bea.com/pub/advisory/262