Secunia

Description

A vulnerability has been identified in BEA WebLogic, which can be exploited by malicious people to gain knowledge of passwords.

The problem is that some passwords are stored/handled in a way, which can result in disclosure of these.

According to BEA Systems, the following issues regarding password disclosure have been identified:

1) The default CredentialMapper stores the passwords in clear text on disk, which can be exploited by extracting the passwords from the binary data files.

2) Several secrets regarding the encryption of passwords in WebLogic Server and WebLogic Express are potentially accessible to non-privileged users. A malicious user with access to files containing encrypted passwords ("config.xml", "filerealm.properties", and "weblogic-rar.xml") can exploit this to gain knowledge of the passwords.

3) The "JDBCConnectionPoolRuntimeMBean" password is displayed in clear text via "weblogic.Admin". This can result in disclosure of the password to a malicious person able to see the user's monitor.

Solution
Apply Service Pack 2 and the following patch:
Further details available in Customer Area

Original Advisory
http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-30.jsp

Deep Links
Links available in Customer Area