BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier, when Internet Inter-ORB Protocol (IIOP) is used, sometimes include a password in an exception message that is sent to a client or stored in a log file, which might allow remote attackers to perform unauthorized actions.
References
Link | Resource |
---|---|
http://dev2dev.bea.com/pub/advisory/154 | |
http://www.securityfocus.com/bid/15052 | |
http://secunia.com/advisories/17138 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-12-30 21:00
Updated : 2008-09-05 13:57
NVD link : CVE-2005-4763
Mitre link : CVE-2005-4763
JSON object : View
CWE
Products Affected
bea
- weblogic_server