CVE-2005-4705 | BDVDB-2026-14913 Detail

Description#

BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7, when a Java client application creates an SSL connection to the server after it has already created an insecure connection, will use the insecure connection, which allows remote attackers to sniff the connection.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://dev2dev.bea.com/pub/advisory/141
http://www.osvdb.org/20095

Exploit#

No public exploit known

History#

Version 12006-02-01Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.