CVEvulnerability
CVE-2006-2546
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-05-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
A recommended admin password reset mechanism for BEA WebLogic Server 8.1, when followed before October 10, 2005, causes the administrator password to be stored in cleartext in the domain directory, which could allow attackers to gain privileges.
Affected configurations
• bea weblogic server 8.1
References
- http://dev2dev.bea.com/pub/advisory/193 Patch, Vendor Advisory
- http://secunia.com/advisories/20130 Vendor Advisory
- http://securitytracker.com/id?1016101 securitytracker.com
- http://www.vupen.com/english/advisories/2006/1828 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26460 exchange.xforce.ibmcloud.com
- http://dev2dev.bea.com/pub/advisory/193 Patch, Vendor Advisory
- http://secunia.com/advisories/20130 Vendor Advisory
- http://securitytracker.com/id?1016101 securitytracker.com
- http://www.vupen.com/english/advisories/2006/1828 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26460 exchange.xforce.ibmcloud.com