BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information (passwords or keyphrases) in the server log file when the -D option is used.
References
Link | Resource |
---|---|
http://dev2dev.bea.com/pub/advisory/152 | Patch Vendor Advisory |
http://www.securityfocus.com/bid/15052 | Patch |
http://secunia.com/advisories/17138 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-12-30 21:00
Updated : 2008-09-05 13:57
NVD link : CVE-2005-4761
Mitre link : CVE-2005-4761
JSON object : View
CWE
Products Affected
bea
- weblogic_server