7.5

CVE-2006-2469

The HTTP handlers in BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7 stores the username and password in cleartext in the WebLogic Server log when access to a web application or protected JWS fails, which allows attackers to gain privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bea ≫ Weblogic Server Version 6.0 Update sp6
Bea ≫ Weblogic Server Version 6.1
Bea ≫ Weblogic Server Version 6.1 Update sp1
Bea ≫ Weblogic Server Version 6.1 Update sp2
Bea ≫ Weblogic Server Version 6.1 Update sp3
Bea ≫ Weblogic Server Version 6.1 Update sp4
Bea ≫ Weblogic Server Version 6.1 Update sp5
Bea ≫ Weblogic Server Version 7.0
Bea ≫ Weblogic Server Version 7.0 Update sp1
Bea ≫ Weblogic Server Version 7.0 Update sp2
Bea ≫ Weblogic Server Version 7.0 Update sp3
Bea ≫ Weblogic Server Version 7.0 Update sp4
Bea ≫ Weblogic Server Version 7.0 Update sp5
Bea ≫ Weblogic Server Version 8.1
Bea ≫ Weblogic Server Version 8.1 Update sp1
Bea ≫ Weblogic Server Version 8.1 Update sp2
Bea ≫ Weblogic Server Version 8.1 Update sp3
Bea ≫ Weblogic Server Version 8.1 Update sp4
Bea ≫ Weblogic Server Version 9.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.33% 0.673
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/20130
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2006/1828
http://dev2dev.bea.com/pub/advisory/189
Patch
Vendor Advisory
http://securitytracker.com/id?1016098
https://exchange.xforce.ibmcloud.com/vulnerabilities/26463