CVEvulnerability
CVE-2004-0652
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-08-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly accessing certain internal methods.
Affected configurations
• bea weblogic server 7.0
• bea weblogic server 7.0.0.1
• bea weblogic server 8.1
References
- http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_55.00.jsp dev2dev.bea.com
- http://secunia.com/advisories/11359 secunia.com
- http://securitytracker.com/id?1009766 securitytracker.com
- http://www.kb.cert.org/vuls/id/352110 Patch, Third Party Advisory, US Government Resource
- http://www.osvdb.org/5296 www.osvdb.org
- http://www.securityfocus.com/bid/10133 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15865 exchange.xforce.ibmcloud.com
- http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_55.00.jsp dev2dev.bea.com
- http://secunia.com/advisories/11359 secunia.com
- http://securitytracker.com/id?1009766 securitytracker.com
- http://www.kb.cert.org/vuls/id/352110 Patch, Third Party Advisory, US Government Resource
- http://www.osvdb.org/5296 www.osvdb.org
- http://www.securityfocus.com/bid/10133 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15865 exchange.xforce.ibmcloud.com