BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information (passwords or keyphrases) in the server log file when the -D option is used.
References
Link | Resource |
---|---|
http://dev2dev.bea.com/pub/advisory/152 | Patch Vendor Advisory |
http://secunia.com/advisories/17138 | Patch Vendor Advisory |
http://www.securityfocus.com/bid/15052 | Patch |
http://dev2dev.bea.com/pub/advisory/152 | Patch Vendor Advisory |
http://secunia.com/advisories/17138 | Patch Vendor Advisory |
http://www.securityfocus.com/bid/15052 | Patch |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:05
Type | Values Removed | Values Added |
---|---|---|
References | () http://dev2dev.bea.com/pub/advisory/152 - Patch, Vendor Advisory | |
References | () http://secunia.com/advisories/17138 - Patch, Vendor Advisory | |
References | () http://www.securityfocus.com/bid/15052 - Patch |
Information
Published : 2005-12-31 05:00
Updated : 2024-11-21 00:05
NVD link : CVE-2005-4761
Mitre link : CVE-2005-4761
CVE.ORG link : CVE-2005-4761
JSON object : View
Products Affected
bea
- weblogic_server
CWE