CVE-2003-1093: Medium severity Bea WebLogic Server vulnerability

Published Dec 31, 2003

Updated

BEA WebLogic Server 6.1, 7.0 and 7.0.0.1, when routing messages to a JMS target domain that is inaccessible, may leak the user's password when it throws a ResourceAllocationException.

Affected Software

7 affected components

Bea WebLogic Server=7.0

Bea WebLogic Server=6.1-sp3

Bea WebLogic Server=6.1-sp1

Bea WebLogic Server=6.1

Bea WebLogic Server=7.0.0.1

Bea WebLogic Server=7.0-sp1

Bea WebLogic Server=6.1-sp2

Remediation

Patch Available

http://www.securityfocus.com/bid/6586

Event History

Dec 31, 2003

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

RemedyDescriptionSeverityAffected Software

Mar 10, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2003-1093?

CVE-2003-1093 has been classified as a medium severity vulnerability due to the potential exposure of user passwords.

How do I fix CVE-2003-1093?

To fix CVE-2003-1093, upgrade your BEA WebLogic Server to a patched version that addresses this vulnerability.

Which versions of Oracle WebLogic Server are affected by CVE-2003-1093?

CVE-2003-1093 affects BEA WebLogic Server versions 6.1 and 7.0, including their service packs.

What is the impact of CVE-2003-1093 on security?

The impact of CVE-2003-1093 is that it may leak user passwords when the server encounters a routing issue with a JMS target domain.

Is there a workaround for CVE-2003-1093?

A workaround for CVE-2003-1093 involves ensuring that JMS target domains are properly configured and accessible to prevent ResourceAllocationExceptions.