CVE-2006-0421 | BDVDB-2026-14818 Detail

Description#

By design, BEA WebLogic Server and WebLogic Express 7.0 and 6.1, when creating multiple domains from the same WebLogic instance on the same machine, allows administrators of any created domain to access other created domains, which could allow administrators to gain privileges that were not intended.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vupen.com/english/advisories/2006/0313
http://dev2dev.bea.com/pub/advisory/165
https://exchange.xforce.ibmcloud.com/vulnerabilities/24286
http://securitytracker.com/id?1015528
http://secunia.com/advisories/18581
http://www.securityfocus.com/bid/16358

Exploit#

No public exploit known

History#

Version 12006-01-25Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.