CVE-2005-0432 | BDVDB-2026-8222 Detail

Description#

BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates different login exceptions that suggest why an authentication attempt fails, which makes it easier for remote attackers to guess passwords via brute force attacks.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/14298
http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA05-74.00.jsp

Exploit#

No public exploit known

History#

Version 12005-02-15Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.