CVE-2008-0863: Infoleak
Published Feb 21, 2008
·Updated
BEA WebLogic Server and WebLogic Express 9.0 and 9.1 exposes the web service's WSDL and security policies, which allows remote attackers to obtain sensitive information and potentially launch further attacks.
Affected Software
4 affected components
Bea WebLogic Server=9.0
Bea WebLogic Server=9.1
Bea WebLogic Server=9.0
Bea WebLogic Server=9.1
Remediation
Patch Available
Event History
Feb 21, 2008
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0863?
CVE-2008-0863 is classified as a high severity vulnerability due to the exposure of sensitive information.
2
How do I fix CVE-2008-0863?
To fix CVE-2008-0863, upgrade the affected BEA WebLogic Server or WebLogic Express to a version that is not vulnerable.
3
What are the affected versions in CVE-2008-0863?
CVE-2008-0863 affects BEA WebLogic Server 9.0 and 9.1, as well as their Express variants.
4
What types of attacks can CVE-2008-0863 allow?
CVE-2008-0863 can potentially allow remote attackers to gain sensitive information and conduct further attacks.
5
Which software does CVE-2008-0863 impact?
CVE-2008-0863 impacts Oracle WebLogic Server and WebLogic Express versions 9.0 and 9.1.