Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0 through SP6, and 6.1 through SP7, when SSL is intended to be used, causes an unencrypted protocol to be used in certain unspecified circumstances, which causes user credentials to be sent across the network in cleartext and allows remote attackers to gain privileges.
References
Link | Resource |
---|---|
http://dev2dev.bea.com/pub/advisory/140 | Patch Vendor Advisory |
http://www.osvdb.org/20094 | Patch |
http://dev2dev.bea.com/pub/advisory/140 | Patch Vendor Advisory |
http://www.osvdb.org/20094 | Patch |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:04
Type | Values Removed | Values Added |
---|---|---|
References | () http://dev2dev.bea.com/pub/advisory/140 - Patch, Vendor Advisory | |
References | () http://www.osvdb.org/20094 - Patch |
Information
Published : 2005-12-31 05:00
Updated : 2024-11-21 00:04
NVD link : CVE-2005-4704
Mitre link : CVE-2005-4704
CVE.ORG link : CVE-2005-4704
JSON object : View
Products Affected
bea
- weblogic_server
CWE