CVEvulnerability
CVE-2007-4613
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-08-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-310
Description
SSL libraries in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold through SP5 might allow remote attackers to obtain plaintext from an SSL stream via a man-in-the-middle attack that injects crafted data and measures the elapsed time before an error response, a different vulnerability than CVE-2006-2461.
Affected configurations
• bea weblogic server 6.0
• bea weblogic server 6.1
• bea weblogic server 7.0
• bea weblogic server 8.1
Related
Weakness · not in database (1)
References
- http://dev2dev.bea.com/pub/advisory/201 Patch, Vendor Advisory
- http://osvdb.org/45838 Broken Link
- http://www.securityfocus.com/bid/22082 Patch, Third Party Advisory, VDB Entry
- http://dev2dev.bea.com/pub/advisory/201 Patch, Vendor Advisory
- http://osvdb.org/45838 Broken Link
- http://www.securityfocus.com/bid/22082 Patch, Third Party Advisory, VDB Entry