[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

251782

 
 

909

 
 

196543

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2005-4762Date: (C)2005-12-31   (M)2023-12-22


BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier sometimes stores the boot password in the registry in cleartext, which might allow local users to gain administrative privileges.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.2
Exploit Score: 3.9
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
BID-15052
SECUNIA-17138
BEA05-99.00

CPE    34
cpe:/a:bea:weblogic_server:6.1:sp7:express
cpe:/a:bea:weblogic_server:6.1:sp4:win32
cpe:/a:bea:weblogic_server:7.0
cpe:/a:bea:weblogic_server:6.1:sp5:express
...

© SecPod Technologies