BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates different login exceptions that suggest why an authentication attempt fails, which makes it easier for remote attackers to guess passwords via brute force attacks.
References
Link | Resource |
---|---|
http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA05-74.00.jsp | Patch Vendor Advisory |
http://secunia.com/advisories/14298 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-05-01 21:00
Updated : 2008-09-05 13:46
NVD link : CVE-2005-0432
Mitre link : CVE-2005-0432
JSON object : View
CWE
Products Affected
bea
- weblogic_server