Vulnerability Bulletins |
Acceso no autorizado a WebLogic Server, Express, y Enterprise. |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Confidencialidad |
| Dificulty | Principiante |
| Required attacker level | Acceso fisico |
System information |
|
| Property | Value |
| Affected manufacturer | Comercial Software |
| Affected software |
WebLogic Enterprise 6.1 WebLogic Express 6.1 WebLogic Server 6.1 |
Description |
|
| BEA WebLogic Server, Express, y Enterprise pueden permitir que un atacante local obtenga la contraseña de WebLogic Server en texto claro desde la máquina utilizada para iniciar los servidores gestionados mediante el Node Manager. Esta vulnerabilidad podría ser utilizada para obtener acceso no autorizado a WebLogic Server. | |
Solution |
|
|
Actualización de software BEA WebLogic 6.1 Actualizar con Service Pack 2 y aplicar el parche para esta vulnerabilidad. ftp://ftpna.bea.com/pub/releases/security/CR064125_wls61sp2.jar |
|
Standar resources |
|
| Property | Value |
| CVE | |
| BID | |
Other resources |
|
|
BEA SECURITY ADVISORY (BEA02-15.00) http://dev2dev.bea.com/resourcelibrary/advisoriesdetail.jsp?highlight=advisoriesnotifications&path=components%2Fdev2dev%2Fresourcelibrary%2Fadvisoriesnotifications%2Fsecurityadvisoriesbea021500.htm |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2003-02-04 |