Lucene search

PRIOn knowledge basePRION:CVE-2006-2471

HistoryMay 19, 2006 - 10:02 a.m.

Design/Logic Flaw

2006-05-1910:02:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.012 Low

EPSS

Percentile

84.8%

JSON

Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive information to remote attackers, including (1) DNS and IP addresses to address to T3 clients, (2) internal sensitive information using GetIORServlet, (3) certain “server details” in exceptions when invalid XML is provided, and (4) a stack trace in a SOAP fault.

CPENameOperatorVersion
weblogic_servereq8.1 express
weblogic_servereq7.0 sp2-express
weblogic_servereq6.1 sp4
weblogic_servereq6.1 express
weblogic_servereq8.1
weblogic_servereq6.1 sp5
weblogic_servereq6.1 sp6
weblogic_servereq7.0 sp4
weblogic_servereq6.1 sp1-express
weblogic_servereq7.0

Name	Operator	Version
weblogic_server	eq	8.1 express
weblogic_server	eq	7.0 sp2-express
weblogic_server	eq	6.1 sp4
weblogic_server	eq	6.1 express
weblogic_server	eq	8.1
weblogic_server	eq	6.1 sp5
weblogic_server	eq	6.1 sp6
weblogic_server	eq	7.0 sp4
weblogic_server	eq	6.1 sp1-express
weblogic_server	eq	7.0

Rows per page:

1-10 of 401

References

dev2dev.bea.com/pub/advisory/187

secunia.com/advisories/20130

securitytracker.com/id?1016096

www.vupen.com/english/advisories/2006/1828

exchange.xforce.ibmcloud.com/vulnerabilities/26465

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.012 Low

EPSS

Percentile

84.8%

JSON

Related for PRION:CVE-2006-2471

cve1