CVE-2003-1290 | BDVDB-2026-14588 Detail

Description#

BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup enabled, allows remote attackers to obtain configuration information by accessing MBeanHome via the Java Naming and Directory Interface (JNDI).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://dev2dev.bea.com/pub/advisory/162
http://www.securityfocus.com/bid/9034
http://secunia.com/advisories/10218
http://secunia.com/advisories/18396
http://www.osvdb.org/3064
http://www.securityfocus.com/bid/16215
https://exchange.xforce.ibmcloud.com/vulnerabilities/13752

Exploit#

No public exploit known

History#

Version 12006-01-13Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.