CVE-2005-4767: Medium severity oracle weblogic server vulnerability
BEA WebLogic Server and WebLogic Express 8.1 SP5 and earlier, and 7.0 SP6 and earlier, when using username/password authentication, does not lock out a username after the maximum number of invalid login attempts, which makes it easier for remote attackers to guess the password.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4767?
CVE-2005-4767 has been classified as a medium severity vulnerability due to weak username/password authentication mechanisms.
How can I fix CVE-2005-4767?
To fix CVE-2005-4767, implement account lockout policies after a set number of failed login attempts in your WebLogic Server configuration.
Which versions of WebLogic are affected by CVE-2005-4767?
CVE-2005-4767 affects BEA WebLogic Server and WebLogic Express version 8.1 SP5 and earlier, as well as version 7.0 SP6 and earlier.
What type of vulnerability is CVE-2005-4767?
CVE-2005-4767 is an authentication-related vulnerability that allows attackers to guess passwords more easily.
What are the potential risks associated with CVE-2005-4767?
The risks associated with CVE-2005-4767 include unauthorized access to sensitive information or systems due to insufficient login failure controls.