CVEvulnerability
CVE-2006-0427
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2006-01-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Description
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0 and 8.1 through SP5 allows malicious EJBs or servlet applications to decrypt system passwords, possibly by accessing functionality that should have been restricted.
Affected configurations
• bea weblogic server 8.1
• bea weblogic server 9.0
References
- http://dev2dev.bea.com/pub/advisory/171 Patch, Vendor Advisory
- http://secunia.com/advisories/18592 Patch, Vendor Advisory
- http://securitytracker.com/id?1015528 Patch
- http://www.osvdb.org/22774 www.osvdb.org
- http://www.securityfocus.com/bid/16358 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0313 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24291 exchange.xforce.ibmcloud.com
- http://dev2dev.bea.com/pub/advisory/171 Patch, Vendor Advisory
- http://secunia.com/advisories/18592 Patch, Vendor Advisory
- http://securitytracker.com/id?1015528 Patch
- http://www.osvdb.org/22774 www.osvdb.org
- http://www.securityfocus.com/bid/16358 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0313 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24291 exchange.xforce.ibmcloud.com