CVE-2006-2467

CVE-2006-2467

EPSS 1.2%

BEA WebLogic Server 8.1 up to SP4, 7.0 up to SP6, and 6.1 up to SP7 displays the internal IP address of the WebLogic server in the WebLogic Server Administration Console, which allows remote authenticated administrators to determine the address.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://dev2dev.bea.com/pub/advisory/191 http://secunia.com/advisories/20130 http://securitytracker.com/id?1016097 http://securitytracker.com/id?1016099 https://exchange.xforce.ibmcloud.com/vulnerabilities/26462 http://www.vupen.com/english/advisories/2006/1828