6.8

CVE-2007-5576

BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bea ≫ Tuxedo Version 8.0
Bea ≫ Tuxedo Version 8.1
Bea ≫ Weblogic Integration Version 8.1
Bea ≫ Weblogic Integration Version 8.1 Update sp2
Bea ≫ Weblogic Integration Version 8.1 Update sp3
Bea ≫ Weblogic Integration Version 8.1 Update sp4
Bea ≫ Weblogic Integration Version 8.1 Update sp5
Bea ≫ Weblogic Integration Version 8.1 Update sp6
Bea ≫ Weblogic Integration Version 9.2
Bea ≫ Weblogic Server Version 5.1 Edition enterprise
Bea ≫ Weblogic Server Version 6.1 Edition express
Bea ≫ Weblogic Server Version 6.1 Update sp1 Edition express
Bea ≫ Weblogic Server Version 6.1 Update sp2 Edition express
Bea ≫ Weblogic Server Version 6.1 Update sp3 Edition express
Bea ≫ Weblogic Server Version 6.1 Update sp4 Edition express
Bea ≫ Weblogic Server Version 6.1 Update sp5 Edition express
Bea ≫ Weblogic Server Version 6.1 Update sp6 Edition express
Bea ≫ Weblogic Server Version 6.1 Update sp7 Edition express
Bea ≫ Weblogic Server Version 7.0
Bea ≫ Weblogic Server Version 7.0 Edition express
Bea ≫ Weblogic Server Version 7.0 Update sp1
Bea ≫ Weblogic Server Version 7.0 Update sp1 Edition express
Bea ≫ Weblogic Server Version 7.0 Update sp2
Bea ≫ Weblogic Server Version 7.0 Update sp2 Edition express
Bea ≫ Weblogic Server Version 7.0 Update sp3
Bea ≫ Weblogic Server Version 7.0 Update sp3 Edition express
Bea ≫ Weblogic Server Version 7.0 Update sp4
Bea ≫ Weblogic Server Version 7.0 Update sp4 Edition express
Bea ≫ Weblogic Server Version 7.0 Update sp5
Bea ≫ Weblogic Server Version 7.0 Update sp5 Edition express
Bea ≫ Weblogic Server Version 7.0 Update sp6
Bea ≫ Weblogic Server Version 7.0 Update sp6 Edition express
Bea ≫ Weblogic Server Version 7.0 Update sp7
Bea ≫ Weblogic Server Version 7.0 Update sp7 Edition express
Bea ≫ Weblogic Server Version 7.0.0.1
Bea ≫ Weblogic Server Version 7.0.0.1 Update sp1
Bea ≫ Weblogic Server Version 7.0.0.1 Update sp2
Bea ≫ Weblogic Server Version 7.0.0.1 Update sp3
Bea ≫ Weblogic Server Version 7.0.0.1 Update sp4
Bea ≫ Weblogic Server Version 8.1 Edition express
Bea ≫ Weblogic Server Version 8.1 Update sp1 Edition express
Bea ≫ Weblogic Server Version 8.1 Update sp2 Edition express
Bea ≫ Weblogic Server Version 8.1 Update sp3 Edition express
Bea ≫ Weblogic Server Version 8.1 Update sp4 Edition express
Bea ≫ Weblogic Server Version 8.1 Update sp5 Edition express
Bea ≫ Weblogic Server Version 9.0
Bea ≫ Weblogic Server Version 9.1
Bea ≫ Weblogic Server Version 9.1 Edition express
Bea ≫ Weblogic Server Version 9.2
Bea ≫ Weblogic Server Version 9.2 Edition express
Bea ≫ Weblogic Workshop Version 8.1 Update sp2
Bea ≫ Weblogic Workshop Version 8.1 Update sp3
Bea ≫ Weblogic Workshop Version 8.1 Update sp4
Bea ≫ Weblogic Workshop Version 8.1 Update sp5
Bea ≫ Weblogic Workshop Version 8.1 Update sp6
Oracle ≫ Weblogic Portal Version 9.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1% 0.583
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 3.1 10
AV:L/AC:L/Au:S/C:C/I:C/A:C
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://dev2dev.bea.com/pub/advisory/226
http://osvdb.org/45478
http://www.vupen.com/english/advisories/2007/1813
https://exchange.xforce.ibmcloud.com/vulnerabilities/34290