CVE-2006-0421

Published: Jan 25, 2006Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

By design, BEA WebLogic Server and WebLogic Express 7.0 and 6.1, when creating multiple domains from the same WebLogic instance on the same machine, allows administrators of any created domain to access other created domains, which could allow administrators to gain privileges that were not intended.

Affected (4)

Products: Bea: Weblogic Server

1 product

Weblogic Server

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Bea Weblogic Server	Version 6.1
Bea Weblogic Server	Version 6.1
Bea Weblogic Server	Version 7.0
Bea Weblogic Server	Version 7.0

References (12)

http://dev2dev.bea.com/pub/advisory/165

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/18581

Source: cve@mitre.org

PatchVendor Advisory

http://securitytracker.com/id?1015528

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/16358

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0313

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24286

Source: cve@mitre.org

http://dev2dev.bea.com/pub/advisory/165

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/18581

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://securitytracker.com/id?1015528

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/16358

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/0313

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/24286

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.