CVEvulnerability
CVE-2008-0863
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-02-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
BEA WebLogic Server and WebLogic Express 9.0 and 9.1 exposes the web service's WSDL and security policies, which allows remote attackers to obtain sensitive information and potentially launch further attacks.
Affected configurations
• bea weblogic server 9.0
• bea weblogic server 9.1
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://dev2dev.bea.com/pub/advisory/260 Patch
- http://www.securitytracker.com/id?1019455 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0612/references www.vupen.com
- http://dev2dev.bea.com/pub/advisory/260 Patch
- http://www.securitytracker.com/id?1019455 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0612/references www.vupen.com