CVE-2005-4762: High severity Bea WebLogic Server vulnerability
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier sometimes stores the boot password in the registry in cleartext, which might allow local users to gain administrative privileges.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4762?
CVE-2005-4762 has a high severity rating due to the exposure of sensitive information allowing local users to gain administrative privileges.
How do I fix CVE-2005-4762?
To fix CVE-2005-4762, ensure that you upgrade to a version of WebLogic Server later than 8.1 SP4 or apply specific workarounds provided by Oracle.
What versions are affected by CVE-2005-4762?
CVE-2005-4762 affects BEA WebLogic Server versions 6.1 SP7 and earlier, 7.0 SP6 and earlier, and 8.1 SP4 and earlier.
What is the nature of the vulnerability in CVE-2005-4762?
CVE-2005-4762 involves storing the boot password in the Windows registry in cleartext, risking unauthorized access by local users.
Who is impacted by CVE-2005-4762?
Organizations using affected versions of BEA WebLogic Server or WebLogic Express are at risk of exploitation by local adversaries.