CVE-2005-1745: Medium severity Bea WebLogic Server vulnerability
Published May 24, 2005
·Updated
The UserLogin control in BEA WebLogic Portal 8.1 through Service Pack 3 prints the password to standard output when an incorrect login attempt is made, which could make it easier for attackers to guess the correct password.
Affected Software
76 affected components
Bea WebLogic Server=8.1
Bea WebLogic Server=8.1-sp4
Bea WebLogic Server=7.0-sp2
Bea WebLogic Server=7.0.0.1-sp4
Bea WebLogic Server=6.1-sp4
Bea WebLogic Server=6.1
Bea WebLogic Server=8.1
Bea WebLogic Server=6.1-sp5
Bea WebLogic Server=6.0-sp1
Bea WebLogic Server=6.1-sp6
Bea WebLogic Server=7.0-sp4
Bea WebLogic Server=6.1-sp1
Bea WebLogic Server=7.0
Bea WebLogic Server=6.0
Bea WebLogic Server=6.1-sp4
Bea WebLogic Server=6.1-sp4
Bea WebLogic Server=7.0.0.1-sp1
Bea WebLogic Server=6.1-sp6
Bea WebLogic Server=6.0-sp2
Bea WebLogic Server=6.0-sp2
Bea WebLogic Server=6.1-sp3
Bea WebLogic Server=6.0-sp2
Bea WebLogic Server=7.0-sp3
Bea WebLogic Server=7.0.0.1-sp4
Bea WebLogic Server=8.1-sp1
Bea WebLogic Server=6.0-sp1
Bea WebLogic Server=7.0.0.1-sp1
Bea WebLogic Server=6.1-sp2
Bea WebLogic Server=8.1-sp3
Bea WebLogic Server=7.0-sp2
Bea WebLogic Server=6.1-sp1
Bea WebLogic Server=8.1-sp3
Bea WebLogic Server=7.0.0.1
Bea WebLogic Server=6.0
Bea WebLogic Server=7.0-sp3
Bea WebLogic Server=7.0.0.1-sp1
Bea WebLogic Server=8.1
Bea WebLogic Server=8.1-sp4
Bea WebLogic Server=7.0-sp5
Bea WebLogic Server=7.0.0.1
Bea WebLogic Server=7.0-sp5
Bea WebLogic Server=7.0-sp5
Bea WebLogic Server=6.1-sp1
Bea WebLogic Server=6.1
Bea WebLogic Server=6.0
Bea WebLogic Server=8.1-sp1
Bea WebLogic Server=7.0-sp2
Bea WebLogic Server=8.1-sp3
Bea WebLogic Server=8.1-sp2
Bea WebLogic Server=6.1
Bea WebLogic Server=6.0-sp1
Bea WebLogic Server=7.0.0.1
Bea WebLogic Server=6.1-sp2
Bea WebLogic Server=7.0.0.1-sp3
Bea WebLogic Server=7.0-sp3
Bea WebLogic Server=7.0-sp1
Bea WebLogic Server=7.0.0.1-sp2
Bea WebLogic Server=6.1-sp5
Bea WebLogic Server=7.0-sp1
Bea WebLogic Server=7.0-sp4
Bea WebLogic Server=8.1-sp1
Bea WebLogic Server=6.1-sp3
Bea WebLogic Server=6.1-sp5
Bea WebLogic Server=7.0-sp1
Bea WebLogic Server=8.1-sp2
Bea WebLogic Server=8.1-sp4
Bea WebLogic Server=7.0.0.1-sp2
Bea WebLogic Server=6.1-sp2
Bea WebLogic Server=7.0
Bea WebLogic Server=8.1-sp2
Bea WebLogic Server=7.0
Bea WebLogic Server=6.1-sp3
Bea WebLogic Server=7.0.0.1-sp3
Bea WebLogic Server=7.0-sp4
Bea WebLogic Server=7.0.0.1-sp2
Oracle Weblogic Portal=8.0
Event History
May 24, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1745?
CVE-2005-1745 is classified as a moderate severity vulnerability.
2
How does CVE-2005-1745 affect the UserLogin control in BEA WebLogic Portal?
CVE-2005-1745 allows the UserLogin control to print passwords to standard output during incorrect logins, potentially exposing sensitive information.
3
How do I mitigate CVE-2005-1745?
To mitigate CVE-2005-1745, upgrade to a patched version of BEA WebLogic Portal that does not log passwords.
4
Which versions of BEA WebLogic Portal are affected by CVE-2005-1745?
CVE-2005-1745 affects BEA WebLogic Portal versions 6.1 to 8.1, including various service packs.
5
Is CVE-2005-1745 a known exploit issue?
Yes, CVE-2005-1745 has been publicly documented and is known in cybersecurity circles.