This kind of thing isn't exactly unique to WebLogic. Privileged filesystem access generally means doom for your application's security layer, as you'll be able

This kind of thing isn't exactly unique to WebLogic. Privileged filesystem access generally means doom for your application's security layer, as you'll be able to springboard into databases or other systems from there. If you have access to a salt file, you can generate hashes from that. If you have access to an encryption key, you can decrypt encrypted strings. Plus, so many configurations just use plaintext passwords. The cool thing here is he found a way to decrypt these without having to run a WebLogic script, which has always been a minor pain.