CVE-2006-2467

Severity

40%

Complexity

80%

Confidentiality

48%

BEA WebLogic Server 8.1 up to SP4, 7.0 up to SP6, and 6.1 up to SP7 displays the internal IP address of the WebLogic server in the WebLogic Server Administration Console, which allows remote authenticated administrators to determine the address.

CVSS 2.0 Base Score 4. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:S/C:P/I:N/A:N).

Overview

Type

BEA Systems WebLogic Server

First reported 18 years ago

2006-05-19 10:02:00

Last updated 7 years ago

2017-07-20 01:31:00

Affected Software

BEA Systems WebLogic Server 6.1

6.1

BEA Systems WebLogic Server 6.1 SP1

6.1

BEA Systems WebLogic Server 6.1 SP2

6.1

BEA Systems WebLogic Server 6.1 SP3

6.1

BEA Systems WebLogic Server 6.1 SP4

6.1

BEA Systems WebLogic Server 6.1 SP5

6.1

BEA Systems WebLogic Server 6.1 SP6

6.1

BEA Systems WebLogic Server 7.0

7.0

BEA Systems WebLogic Server 7.0 Service Pack 1

7.0

BEA Systems WebLogic Server 7.0 Service Pack 2

7.0

BEA Systems WebLogic Server 7.0 Service Pack 3

7.0

BEA Systems WebLogic Server 7.0 Service Pack 4

7.0

BEA Systems WebLogic Server 7.0 Service Pack 5

7.0

BEA Systems WebLogic Server 8.1

8.1

BEA Systems WebLogic Server 8.1 SP1

8.1

BEA Systems WebLogic Server 8.1 SP2

8.1

BEA Systems WebLogic Server 8.1 SP3

8.1

References

BEA06-129.00

Patch, Vendor Advisory

20130