CVE-2008-0863

BEA WebLogic Server and WebLogic Express 9.0 and 9.1 exposes the web service's WSDL and security policies, which allows remote attackers to obtain sensitive information and potentially launch further attacks.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:9.0:*:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:9.1:*:express:*:*:*:*:*

History

21 Nov 2024, 00:43

Type Values Removed Values Added
References () http://dev2dev.bea.com/pub/advisory/260 - Patch () http://dev2dev.bea.com/pub/advisory/260 - Patch
References () http://www.securitytracker.com/id?1019455 - () http://www.securitytracker.com/id?1019455 -
References () http://www.vupen.com/english/advisories/2008/0612/references - () http://www.vupen.com/english/advisories/2008/0612/references -

Information

Published : 2008-02-21 01:44

Updated : 2024-11-21 00:43


NVD link : CVE-2008-0863

Mitre link : CVE-2008-0863

CVE.ORG link : CVE-2008-0863


JSON object : View

Products Affected

bea

  • weblogic_server
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor