CVE-2006-0431

Published: Jan 25, 2006Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP5 allows untrusted applications to obtain the server's SSL identity via unknown attack vectors.

Affected (2)

Products: Bea: Weblogic Server

Bea

1 product

Weblogic Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Bea Weblogic Server	Version 8.1 sp5
Bea Weblogic Server	Version 8.1 sp5

References (12)

http://dev2dev.bea.com/pub/advisory/175

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/18592

Source: cve@mitre.org

PatchVendor Advisory

http://securitytracker.com/id?1015528

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/16358

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0313

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24302

Source: cve@mitre.org

http://dev2dev.bea.com/pub/advisory/175