CVE-2006-0432

Published: Jan 25, 2006Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0, when an Administrator uses the WebLogic Administration Console to add custom security policies, causes incorrect policies to be created, which prevents the server from properly protecting JNDI resources.

Affected (2)

Products: Bea: Weblogic Server

1 product

Weblogic Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Bea Weblogic Server	Version 9.0
Bea Weblogic Server	Version 9.0

References (12)

http://dev2dev.bea.com/pub/advisory/176

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/18592

Source: cve@mitre.org

PatchVendor Advisory

http://securitytracker.com/id?1015528

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/16358

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0313

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24299

Source: cve@mitre.org

http://dev2dev.bea.com/pub/advisory/176

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/18592

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://securitytracker.com/id?1015528

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/16358

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/0313

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/24299

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.