CVE-2005-4704: Medium severity Bea WebLogic Server vulnerability
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0 through SP6, and 6.1 through SP7, when SSL is intended to be used, causes an unencrypted protocol to be used in certain unspecified circumstances, which causes user credentials to be sent across the network in cleartext and allows remote attackers to gain privileges.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4704?
CVE-2005-4704 is considered a moderate severity vulnerability that affects user credential security.
How does CVE-2005-4704 affect BEA WebLogic Server?
CVE-2005-4704 causes an unencrypted protocol to be used under certain circumstances, leading to user credentials being sent in plaintext.
Which versions of BEA WebLogic Server are affected by CVE-2005-4704?
CVE-2005-4704 affects BEA WebLogic Server versions 6.1 through SP7 and 7.0 through SP6, along with version 8.1 through SP3.
How do I fix CVE-2005-4704?
To fix CVE-2005-4704, upgrade to a patched version of BEA WebLogic Server that resolves this issue.
Is there any workaround for CVE-2005-4704?
A potential workaround for CVE-2005-4704 includes ensuring SSL is correctly configured to prevent the fallback to unencrypted protocols.