CVE-2005-0432: Medium severity Bea WebLogic Server vulnerability
BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates different login exceptions that suggest why an authentication attempt fails, which makes it easier for remote attackers to guess passwords via brute force attacks.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0432?
CVE-2005-0432 is considered to have a high severity due to the possibility of brute force attacks compromising authentication.
How do I fix CVE-2005-0432?
To fix CVE-2005-0432, upgrade to BEA WebLogic Server version 8.1 Service Pack 4 or later, or version 7.0 Service Pack 6 or later.
What systems are affected by CVE-2005-0432?
CVE-2005-0432 affects BEA WebLogic Server versions 7.0 Service Pack 5 and 8.1 Service Pack 3 and earlier.
What impact does CVE-2005-0432 have on security?
CVE-2005-0432 can lead to unauthorized access as attackers may exploit the predictable login failure messages to guess passwords.
Is CVE-2005-0432 a local or remote vulnerability?
CVE-2005-0432 is a remote vulnerability that allows attackers to exploit the system from a remote location.