CVEvulnerability
CVE-2006-2461
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-05-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some transmissions from being encrypted via SSL, and allows remote attackers to more easily read potentially sensitive network traffic.
Affected configurations
• bea weblogic server 8.1
References
- http://dev2dev.bea.com/pub/advisory/194 Patch, Vendor Advisory
- http://secunia.com/advisories/20130 Patch, Vendor Advisory
- http://securitytracker.com/id?1016102 Patch
- http://www.vupen.com/english/advisories/2006/1828 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26459 exchange.xforce.ibmcloud.com
- http://dev2dev.bea.com/pub/advisory/194 Patch, Vendor Advisory
- http://secunia.com/advisories/20130 Patch, Vendor Advisory
- http://securitytracker.com/id?1016102 Patch
- http://www.vupen.com/english/advisories/2006/1828 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26459 exchange.xforce.ibmcloud.com