CVE-2005-4763: High severity Bea WebLogic Server vulnerability
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier, when Internet Inter-ORB Protocol (IIOP) is used, sometimes include a password in an exception message that is sent to a client or stored in a log file, which might allow remote attackers to perform unauthorized actions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4763?
CVE-2005-4763 is classified as a medium severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-2005-4763?
To fix CVE-2005-4763, upgrade your BEA WebLogic Server to version 8.1 SP5 or later, 7.0 SP7 or later, or 6.1 SP8 or later.
What types of software versions are affected by CVE-2005-4763?
CVE-2005-4763 affects BEA WebLogic Server versions 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier.
What is the nature of the vulnerability in CVE-2005-4763?
CVE-2005-4763 is a vulnerability that can disclose sensitive passwords in exception messages sent to clients or logged.
Can CVE-2005-4763 be exploited remotely?
Yes, CVE-2005-4763 can be exploited by remote attackers who may gain unauthorized access to sensitive information.