CVE-2005-4766 | BDVDB-2026-16009 Detail

Description#

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not encrypt multicast traffic, which might allow remote attackers to read sensitive cluster synchronization messages by sniffing the multicast traffic.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://dev2dev.bea.com/pub/advisory/157
http://www.securityfocus.com/bid/15052
http://secunia.com/advisories/17138

Exploit#

No public exploit known

History#

Version 12006-04-01Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.