CVE-2006-2546

Published: May 23, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

A recommended admin password reset mechanism for BEA WebLogic Server 8.1, when followed before October 10, 2005, causes the administrator password to be stored in cleartext in the domain directory, which could allow attackers to gain privileges.

Affected (1)

Products: Bea: Weblogic Server

Bea

1 product

Weblogic Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Bea Weblogic Server	Version 8.1

References (10)

http://dev2dev.bea.com/pub/advisory/193

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/20130

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1016101

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1828

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26460

Source: cve@mitre.org

http://dev2dev.bea.com/pub/advisory/193