IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm (XOR and base64 encoding), which allows local users to decrypt passwords when the configuration file is exported to XML.
References
Configurations
Information
Published : 2003-12-30 21:00
Updated : 2017-07-28 18:29
NVD link : CVE-2003-1447
Mitre link : CVE-2003-1447
JSON object : View
CWE
CWE-310
Cryptographic Issues
Products Affected
ibm
- websphere_application_server