Insecure File Permissions in Sun ONE Application Server 7.0 for Windows

CVE-2003-0414

Summary

The Sun ONE Application Server 7.0 for Windows creates a statefile with world-readable permissions, which inadvertently exposes sensitive information. This vulnerability allows local users to access and read a plaintext password stored in the statefile, leading to potential unauthorized access to the server and its services. Organizations using this application should review their file permission configurations to mitigate the risk of privilege escalation.

References