CVE-2006-2467

CVE-2006-2467

EPSS 1.2%

BEA WebLogic Server 8.1 up to SP4, 7.0 up to SP6, and 6.1 up to SP7 displays the internal IP address of the WebLogic server in the WebLogic Server Administration Console, which allows remote authenticated administrators to determine the address.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://dev2dev.bea.com/pub/advisory/191 http://secunia.com/advisories/20130 http://securitytracker.com/id?1016097 http://securitytracker.com/id?1016099 https://exchange.xforce.ibmcloud.com/vulnerabilities/26462 http://www.vupen.com/english/advisories/2006/1828