CVE-2006-2464 — Weblogic Server vulnerability

3 documents3 sources
Severity
4.6MEDIUMNVD
EPSS
0.1%
top 74.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
BEA Weblogic Server
Timeline
PublishedMay 19
Latest updateMay 1

Description

stopWebLogic.sh in BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6 displays the administrator password to stdout when executed, which allows local users to obtain the password by viewing a local display.

CVSS vector

AV:L/AC:L/C:P/I:P/A:PExploitability: 3.9 | Impact: 6.4

Affected Packages1 packages

▶NVDbea/weblogic_server7.0, 8.1+1

Patches

Patch: dev2dev.bea.com ↗Patch: secunia.com ↗Patch: securitytracker.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-hxw9-82wx-f7rj: stopWebLogic↗2022-05-01
▶
CVEList
CVE-2006-2464: stopWebLogic↗2006-05-19
▶
CVE-2006-2464 — BEA Weblogic Server vulnerability | cvebase