Lucene search
HistoryMay 19, 2006 - 10:02 a.m.
CVE-2006-2464
cve-2006-2464
bea weblogic
server
security
vulnerability
password exposure
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.3 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
stopWebLogic.sh in BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6 displays the administrator password to stdout when executed, which allows local users to obtain the password by viewing a local display.
Affected configurations
Node
beaweblogic_serverMatch7.0
ORbeaweblogic_serverMatch7.0sp1
ORbeaweblogic_serverMatch7.0sp2
ORbeaweblogic_serverMatch7.0sp3
ORbeaweblogic_serverMatch7.0sp4
ORbeaweblogic_serverMatch7.0sp5
ORbeaweblogic_serverMatch8.1
ORbeaweblogic_serverMatch8.1sp1
ORbeaweblogic_serverMatch8.1sp2
ORbeaweblogic_serverMatch8.1sp3
| CPE | Name | Operator | Version |
|---|---|---|---|
| bea:weblogic_server | bea weblogic server | eq | 7.0 |
| bea:weblogic_server | bea weblogic server | eq | 8.1 |
Related
prion
prion
Default credentials
2006-05-19 10:02:00
cvelist
cvelist
CVE-2006-2464
2006-05-19 10:00:00
nvd
nvd
CVE-2006-2464
2006-05-19 10:02:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.3 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2006-2464