CVE-2006-2467
First published: Fri May 19 2006(Updated: )
BEA WebLogic Server 8.1 up to SP4, 7.0 up to SP6, and 6.1 up to SP7 displays the internal IP address of the WebLogic server in the WebLogic Server Administration Console, which allows remote authenticated administrators to determine the address.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle WebLogic Server | =6.1-sp4 | |
| Oracle WebLogic Server | =8.1 | |
| Oracle WebLogic Server | =6.1-sp5 | |
| Oracle WebLogic Server | =6.1-sp6 | |
| Oracle WebLogic Server | =7.0-sp4 | |
| Oracle WebLogic Server | =7.0 | |
| Oracle WebLogic Server | =6.1-sp3 | |
| Oracle WebLogic Server | =7.0-sp3 | |
| Oracle WebLogic Server | =8.1-sp3 | |
| Oracle WebLogic Server | =7.0-sp2 | |
| Oracle WebLogic Server | =7.0-sp5 | |
| Oracle WebLogic Server | =6.1-sp1 | |
| Oracle WebLogic Server | =8.1-sp2 | |
| Oracle WebLogic Server | =6.1 | |
| Oracle WebLogic Server | =7.0-sp1 | |
| Oracle WebLogic Server | =8.1-sp1 | |
| Oracle WebLogic Server | =6.1-sp2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2006-2467?
CVE-2006-2467 is classified as a medium severity vulnerability due to exposure of internal IP addresses that could aid attackers in targeted attacks.
How do I fix CVE-2006-2467?
To fix CVE-2006-2467, upgrade to a patched version of WebLogic Server after verifying your current version.
What are the affected versions related to CVE-2006-2467?
CVE-2006-2467 affects BEA WebLogic Server versions 6.1 (SP1 to SP7), 7.0 (SP1 to SP6), and 8.1 (up to SP4).
How does CVE-2006-2467 impact WebLogic Server security?
CVE-2006-2467 can allow remote authenticated administrators to discover the internal IP address of the WebLogic Server, potentially leading to further attacks.
Is there a workaround for CVE-2006-2467?
No official workaround exists for CVE-2006-2467; the recommended action is to update to a secure version of WebLogic Server.
- agent/references
- agent/type
- agent/remedy
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/bea
- canonical/oracle weblogic server
- version/oracle weblogic server/6.1-sp4
- version/oracle weblogic server/8.1
- version/oracle weblogic server/6.1-sp5
- version/oracle weblogic server/6.1-sp6
- version/oracle weblogic server/7.0-sp4
- version/oracle weblogic server/7.0
- version/oracle weblogic server/6.1-sp3
- version/oracle weblogic server/7.0-sp3
- version/oracle weblogic server/8.1-sp3
- version/oracle weblogic server/7.0-sp2
- version/oracle weblogic server/7.0-sp5
- version/oracle weblogic server/6.1-sp1
- version/oracle weblogic server/8.1-sp2
- version/oracle weblogic server/6.1
- version/oracle weblogic server/7.0-sp1
- version/oracle weblogic server/8.1-sp1
- version/oracle weblogic server/6.1-sp2