CVE-2005-4704 | BDVDB-2026-14912 Detail

Description#

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0 through SP6, and 6.1 through SP7, when SSL is intended to be used, causes an unencrypted protocol to be used in certain unspecified circumstances, which causes user credentials to be sent across the network in cleartext and allows remote attackers to gain privileges.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://dev2dev.bea.com/pub/advisory/140
http://www.osvdb.org/20094

Exploit#

No public exploit known

History#

Version 12006-02-01Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.