BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier, when Internet Inter-ORB Protocol (IIOP) is used, sometimes include a password in an exception message that is sent to a client or stored in a log file, which might allow remote attackers to perform unauthorized actions.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:05
Type | Values Removed | Values Added |
---|---|---|
References | () http://dev2dev.bea.com/pub/advisory/154 - | |
References | () http://secunia.com/advisories/17138 - Vendor Advisory | |
References | () http://www.securityfocus.com/bid/15052 - |
Information
Published : 2005-12-31 05:00
Updated : 2024-11-21 00:05
NVD link : CVE-2005-4763
Mitre link : CVE-2005-4763
CVE.ORG link : CVE-2005-4763
JSON object : View
Products Affected
bea
- weblogic_server
CWE