CVEvulnerability
CVE-2006-2468
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-05-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Description
The WebLogic Server Administration Console in BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 displays the domain name in the Console login form, which allows remote attackers to obtain sensitive information.
Affected configurations
• bea weblogic server 7.0
• bea weblogic server 8.1
References
- http://dev2dev.bea.com/pub/advisory/190 Patch, Vendor Advisory
- http://secunia.com/advisories/20130 Patch, Vendor Advisory
- http://securitytracker.com/id?1016097 securitytracker.com
- http://securitytracker.com/id?1016099 securitytracker.com
- http://www.vupen.com/english/advisories/2006/1828 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26468 exchange.xforce.ibmcloud.com
- http://dev2dev.bea.com/pub/advisory/190 Patch, Vendor Advisory
- http://secunia.com/advisories/20130 Patch, Vendor Advisory
- http://securitytracker.com/id?1016097 securitytracker.com
- http://securitytracker.com/id?1016099 securitytracker.com
- http://www.vupen.com/english/advisories/2006/1828 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26468 exchange.xforce.ibmcloud.com