CVE-2006-2467: Medium severity Bea WebLogic Server vulnerability
BEA WebLogic Server 8.1 up to SP4, 7.0 up to SP6, and 6.1 up to SP7 displays the internal IP address of the WebLogic server in the WebLogic Server Administration Console, which allows remote authenticated administrators to determine the address.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2467?
CVE-2006-2467 is classified as a medium severity vulnerability due to exposure of internal IP addresses that could aid attackers in targeted attacks.
How do I fix CVE-2006-2467?
To fix CVE-2006-2467, upgrade to a patched version of WebLogic Server after verifying your current version.
What are the affected versions related to CVE-2006-2467?
CVE-2006-2467 affects BEA WebLogic Server versions 6.1 (SP1 to SP7), 7.0 (SP1 to SP6), and 8.1 (up to SP4).
How does CVE-2006-2467 impact WebLogic Server security?
CVE-2006-2467 can allow remote authenticated administrators to discover the internal IP address of the WebLogic Server, potentially leading to further attacks.
Is there a workaround for CVE-2006-2467?
No official workaround exists for CVE-2006-2467; the recommended action is to update to a secure version of WebLogic Server.