CVE-2005-4761 | BDVDB-2026-16004 Detail

Description#

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information (passwords or keyphrases) in the server log file when the -D option is used.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/15052
http://dev2dev.bea.com/pub/advisory/152
http://secunia.com/advisories/17138

Exploit#

No public exploit known

History#

Version 12006-04-01Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.