CVE-2006-2461 | BDVDB-2026-16978 Detail

Description#

BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some transmissions from being encrypted via SSL, and allows remote attackers to more easily read potentially sensitive network traffic.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/20130
http://securitytracker.com/id?1016102
http://www.vupen.com/english/advisories/2006/1828
http://dev2dev.bea.com/pub/advisory/194
https://exchange.xforce.ibmcloud.com/vulnerabilities/26459

Exploit#

No public exploit known

History#

Version 12006-05-19Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.