CVE-2003-1221 | BDVDB-2026-11937 Detail

Description#

BEA WebLogic Express and Server 7.0 through 8.1 SP 1, under certain circumstances when a request to use T3 over SSL (t3s) is made to the insecure T3 port, may use a non-SSL connection for the communication, which could allow attackers to sniff sessions.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/9034
http://dev2dev.bea.com/pub/advisory/32

Exploit#

No public exploit known

History#

Version 12005-08-16Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.