Lucene search

K
cve[email protected]CVE-2006-0432
HistoryJan 25, 2006 - 11:07 p.m.

CVE-2006-0432

2006-01-2523:07:00
NVD-CWE-Other
web.nvd.nist.gov
21
cve-2006-0432
bea weblogic server
weblogic express 9.0
administrator
security policies
jndi resources
nvd

7.4 High

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

30.5%

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0, when an Administrator uses the WebLogic Administration Console to add custom security policies, causes incorrect policies to be created, which prevents the server from properly protecting JNDI resources.

7.4 High

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

30.5%

Related for CVE-2006-0432