PT-2003-2048 · Bea · Bea Weblogic Server

Publicado 2003-12-31 · Atualizado 2017-07-11 · CVE-2003-1093

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BEA WebLogic Server versions 6.1, 7.0, 7.0.0.1

Description The issue occurs when routing messages to a JMS target domain that is inaccessible, potentially leading to a password leak when a ResourceAllocationException is thrown.

Recommendations For BEA WebLogic Server versions 6.1, 7.0, 7.0.0.1, consider implementing additional error handling mechanisms to prevent password leakage when encountering inaccessible JMS target domains. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2003-1093

Produtos afetados

Bea Weblogic Server

Referências · 6

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1093 · Nota
• http://kb.cert.org/vuls/id/331937 · Nota
• http://securityfocus.com/bid/6586 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2003-1093 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11057 · Nota
• http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-24.jsp · Nota