Lucene search

PRIOn knowledge basePRION:CVE-2006-2468

HistoryMay 19, 2006 - 10:02 a.m.

Information disclosure

2006-05-1910:02:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

59.9%

JSON

The WebLogic Server Administration Console in BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 displays the domain name in the Console login form, which allows remote attackers to obtain sensitive information.

CPENameOperatorVersion
weblogic_servereq8.1
weblogic_servereq7.0 sp4
weblogic_servereq7.0
weblogic_servereq7.0 sp3
weblogic_servereq8.1 sp3
weblogic_servereq7.0 sp2
weblogic_servereq7.0 sp5
weblogic_servereq8.1 sp2
weblogic_servereq7.0 sp1
weblogic_servereq8.1 sp1

Name	Operator	Version
weblogic_server	eq	8.1
weblogic_server	eq	7.0 sp4
weblogic_server	eq	7.0
weblogic_server	eq	7.0 sp3
weblogic_server	eq	8.1 sp3
weblogic_server	eq	7.0 sp2
weblogic_server	eq	7.0 sp5
weblogic_server	eq	8.1 sp2
weblogic_server	eq	7.0 sp1
weblogic_server	eq	8.1 sp1

References

dev2dev.bea.com/pub/advisory/190

secunia.com/advisories/20130

securitytracker.com/id?1016097

securitytracker.com/id?1016099

www.vupen.com/english/advisories/2006/1828

exchange.xforce.ibmcloud.com/vulnerabilities/26468

7 High

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

59.9%

JSON

Related for PRION:CVE-2006-2468

cve1