PT-2007-1884 · Bea · Bea Weblogic Server

Publicado 2007-01-23 · Atualizado 2011-03-08 · CVE-2007-0413

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Média

Vetor base

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BEA WebLogic Server versions 8.1 through 8.1 SP5

Description The issue allows local users to obtain sensitive information by reading a backup file of config.xml that contains cleartext data after offline editing.

Recommendations For BEA WebLogic Server versions 8.1 through 8.1 SP5, consider removing or securing the backup file of config.xml after offline editing to prevent unauthorized access to sensitive information.

Correção

Identificadores relacionados

CVE-2007-0413

Produtos afetados

Bea Weblogic Server

Referências · 8

• http://osvdb.org/38504 · Nota
• http://vupen.com/english/advisories/2007/0213 · Nota
• http://secunia.com/advisories/23750 · Aviso do Fabricante
• http://dev2dev.bea.com/pub/advisory/207 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-0413 · Nota de Segurança
• http://securityfocus.com/bid/22082 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0413 · Nota
• http://securitytracker.com/id?1017525 · Nota