Search...

BEA WebLogic Compilation Error JSP Source Disclosure

2006-05-16T08:17:37

ID OSVDB:25547
Type osvdb
Reporter OSVDB
Modified 2006-05-16T08:17:37

Description

No description provided by the source

References:

Vendor URL: http://www.bea.com/ Vendor Specific Advisory URL Secunia Advisory ID:20130 Keyword: BEA06-130.00 FrSIRT Advisory: ADV-2006-1828 CVE-2006-2466

JSON Vulners Source

Initial Source

{"edition": 1, "title": "BEA WebLogic Compilation Error JSP Source Disclosure", "bulletinFamily": "software", "published": "2006-05-16T08:17:37", "lastseen": "2017-04-28T13:20:22", "modified": "2006-05-16T08:17:37", "reporter": "OSVDB", "viewCount": 0, "href": "https://vulners.com/osvdb/OSVDB:25547", "description": "# No description provided by the source\n\n## References:\nVendor URL: http://www.bea.com/\n[Vendor Specific Advisory URL](http://dev2dev.bea.com/pub/advisory/192)\n[Secunia Advisory ID:20130](https://secuniaresearch.flexerasoftware.com/advisories/20130/)\nKeyword: BEA06-130.00\nFrSIRT Advisory: ADV-2006-1828\n[CVE-2006-2466](https://vulners.com/cve/CVE-2006-2466)\n", "affectedSoftware": [], "type": "osvdb", "references": [], "enchantments": {"score": {"value": 6.0, "vector": "NONE", "modified": "2017-04-28T13:20:22", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2006-2466"]}], "modified": "2017-04-28T13:20:22", "rev": 2}, "vulnersScore": 6.0}, "cvss": {"vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:NONE/A:NONE/", "score": 2.6}, "cvelist": ["CVE-2006-2466"], "id": "OSVDB:25547", "immutableFields": []}

{"cve": [{"lastseen": "2021-02-02T05:27:20", "description": "BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 allows remote attackers to obtain the source code of JSP pages during certain circumstances related to a \"timing window\" when a compilation error occurs, aka the \"JSP showcode vulnerability.\"", "edition": 4, "cvss3": {}, "published": "2006-05-19T10:02:00", "title": "CVE-2006-2466", "type": "cve", "cwe": ["NVD-CWE-Other"], "bulletinFamily": "NVD", "cvss2": {"severity": "LOW", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "PARTIAL", "availabilityImpact": "NONE", "integrityImpact": "NONE", "baseScore": 2.6, "vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2006-2466"], "modified": "2017-07-20T01:31:00", "cpe": ["cpe:/a:bea:weblogic_server:8.1", "cpe:/a:bea:weblogic_server:7.0"], "id": "CVE-2006-2466", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-2466", "cvss": {"score": 2.6, "vector": "AV:N/AC:H/Au:N/C:P/I:N/A:N"}, "cpe23": ["cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*", "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*", "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*", "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*", "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*", "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*", "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*", "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*", "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*"]}]}