CVE-2003-1447
- State
- Published
- Severity
- Not scored
- Published
- Oct 23, 2007
- Updated
- Aug 8, 2024
- Reserved
- Oct 22, 2007
Description
IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm (XOR and base64 encoding), which allows local users to decrypt passwords when the configuration file is exported to XML.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- websphere-xml-weak-encryption(11245)vdb-entry
- 20030206 Re: Weak password protection in WebSphere 4.0.4 XML configuration exportmailing-list
- 6758vdb-entry
- 20030204 Weak password protection in WebSphere 4.0.4 XML configuration exportmailing-list
- 3277third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.