OSVDB ID: 5296 Title: BEA WebLogic Internal Method Boot Credential Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
BEA WebLogic, contains a flaw that may lead to unauthorized information disclosure. This issue is trigerred when a knowledgeable attacker who can install and execute code, inserts some code , which will disclose the username and the password of the user who booted the server resulting in a loss of confidentiality |
Classification |
Location:
Local Access Required
Attack Type: Authentication Management, Information Disclosure Impact: Loss of Integrity Exploit: Exploit Public Disclosure: OSVDB Verified |
Solution |
Upgrade to the latest available Service Pack or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |