CVE-2006-0424

CVE-2006-0424

EPSS 1.3%

BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allows remote authenticated guest users to read the server log and obtain sensitive configuration information.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://dev2dev.bea.com/pub/advisory/168 http://secunia.com/advisories/18592 http://securitytracker.com/id?1015528 https://exchange.xforce.ibmcloud.com/vulnerabilities/24295 http://www.osvdb.org/22776 http://www.securityfocus.com/bid/16358 http://www.vupen.com/english/advisories/2006/0313