CVE-2006-2468
First published: Fri May 19 2006(Updated: )
The WebLogic Server Administration Console in BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 displays the domain name in the Console login form, which allows remote attackers to obtain sensitive information.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle WebLogic Server | =8.1 | |
| Oracle WebLogic Server | =7.0-sp4 | |
| Oracle WebLogic Server | =7.0 | |
| Oracle WebLogic Server | =7.0-sp3 | |
| Oracle WebLogic Server | =8.1-sp3 | |
| Oracle WebLogic Server | =7.0-sp2 | |
| Oracle WebLogic Server | =7.0-sp5 | |
| Oracle WebLogic Server | =8.1-sp2 | |
| Oracle WebLogic Server | =7.0-sp1 | |
| Oracle WebLogic Server | =8.1-sp1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2006-2468?
CVE-2006-2468 is classified as a medium severity vulnerability.
How do I fix CVE-2006-2468?
To fix CVE-2006-2468, update to a patched version of BEA WebLogic Server or disable the display of the domain name in the login form.
Which versions of WebLogic Server are affected by CVE-2006-2468?
CVE-2006-2468 affects BEA WebLogic Server versions 7.0 up to SP6 and 8.1 up to SP4.
What is the technical impact of CVE-2006-2468?
CVE-2006-2468 allows remote attackers to gain sensitive information by observing the domain name in the login form.
Can CVE-2006-2468 be exploited remotely?
Yes, CVE-2006-2468 can be exploited remotely by attackers with network access to the WebLogic Server Administration Console.
- agent/references
- agent/type
- agent/softwarecombine
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/bea
- canonical/oracle weblogic server
- version/oracle weblogic server/8.1
- version/oracle weblogic server/7.0-sp4
- version/oracle weblogic server/7.0
- version/oracle weblogic server/7.0-sp3
- version/oracle weblogic server/8.1-sp3
- version/oracle weblogic server/7.0-sp2
- version/oracle weblogic server/7.0-sp5
- version/oracle weblogic server/8.1-sp2
- version/oracle weblogic server/7.0-sp1
- version/oracle weblogic server/8.1-sp1