Lucene search
HistoryMay 23, 2006 - 10:06 a.m.
CVE-2006-2546
cve-2006-2546
bea weblogic server 8.1
password reset
cleartext storage
admin privilege
security vulnerability
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.5%
A recommended admin password reset mechanism for BEA WebLogic Server 8.1, when followed before October 10, 2005, causes the administrator password to be stored in cleartext in the domain directory, which could allow attackers to gain privileges.
Affected configurations
Node
beaweblogic_serverMatch8.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| bea:weblogic_server | bea weblogic server | eq | 8.1 |
Related
cvelist
cvelist
CVE-2006-2546
2006-05-23 10:00:00
prion
prion
Design/Logic Flaw
2006-05-23 10:06:00
nvd
nvd
CVE-2006-2546
2006-05-23 10:06:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.5%
Related for CVE-2006-2546