5

CVE-2003-1221

BEA WebLogic Express and Server 7.0 through 8.1 SP 1, under certain circumstances when a request to use T3 over SSL (t3s) is made to the insecure T3 port, may use a non-SSL connection for the communication, which could allow attackers to sniff sessions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bea ≫ Weblogic Server Version 7.0
Bea ≫ Weblogic Server Version 7.0 Edition express
Bea ≫ Weblogic Server Version 7.0 Edition win32
Bea ≫ Weblogic Server Version 7.0 Update sp1
Bea ≫ Weblogic Server Version 7.0 Update sp1 Edition express
Bea ≫ Weblogic Server Version 7.0 Update sp1 Edition win32
Bea ≫ Weblogic Server Version 7.0 Update sp2
Bea ≫ Weblogic Server Version 7.0 Update sp2 Edition express
Bea ≫ Weblogic Server Version 7.0 Update sp2 Edition win32
Bea ≫ Weblogic Server Version 7.0 Update sp3
Bea ≫ Weblogic Server Version 7.0 Update sp3 Edition express
Bea ≫ Weblogic Server Version 7.0 Update sp3 Edition win32
Bea ≫ Weblogic Server Version 7.0 Update sp4 Edition win32
Bea ≫ Weblogic Server Version 7.0.0.1
Bea ≫ Weblogic Server Version 7.0.0.1 Edition express
Bea ≫ Weblogic Server Version 7.0.0.1 Edition win32
Bea ≫ Weblogic Server Version 7.0.0.1 Update sp1
Bea ≫ Weblogic Server Version 7.0.0.1 Update sp1 Edition express
Bea ≫ Weblogic Server Version 7.0.0.1 Update sp1 Edition win32
Bea ≫ Weblogic Server Version 7.0.0.1 Update sp2
Bea ≫ Weblogic Server Version 7.0.0.1 Update sp2 Edition express
Bea ≫ Weblogic Server Version 7.0.0.1 Update sp2 Edition win32
Bea ≫ Weblogic Server Version 8.1
Bea ≫ Weblogic Server Version 8.1 Edition express
Bea ≫ Weblogic Server Version 8.1 Update sp1
Bea ≫ Weblogic Server Version 8.1 Update sp1 Edition express
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.87% 0.541
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/bid/9034
Patch
http://dev2dev.bea.com/pub/advisory/32