CVE-2003-1224

CVE-2003-1224 describes a vulnerability in BEA WebLogic Server and Express versions 7.0 and 7.0.0.1 where the weblogic.admin component displays the JDBCConnectionPoolRuntimeMBean password in cleartext on the screen. This allows an attacker with physical access to the display to obtain sensitive credentials through "shoulder surfing." The vulnerability has a low CVSS score of 2.1, indicating low attack complexity and local access requirements, with a potential impact of partial confidentiality loss. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing, despite a relatively high number of community mentions.