CVE-2006-2471: Medium severity Bea WebLogic Server vulnerability
Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive information to remote attackers, including (1) DNS and IP addresses to address to T3 clients, (2) internal sensitive information using GetIORServlet, (3) certain "server details" in exceptions when invalid XML is provided, and (4) a stack trace in a SOAP fault.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2471?
CVE-2006-2471 is considered a medium to high severity vulnerability due to sensitive information exposure.
How do I fix CVE-2006-2471?
To fix CVE-2006-2471, upgrade to the latest patched version of BEA WebLogic Server.
What types of information can be leaked by CVE-2006-2471?
CVE-2006-2471 can leak DNS and IP addresses, internal sensitive information, and certain server details.
Which versions of WebLogic Server are affected by CVE-2006-2471?
CVE-2006-2471 affects BEA WebLogic Server versions 6.1 through 8.1 up to service pack 4.
Who is impacted by CVE-2006-2471 vulnerabilities?
Organizations using vulnerable versions of BEA WebLogic Server could be impacted by CVE-2006-2471.