CVE-2007-5576

Published: Oct 18, 2007Modified: Apr 23, 2026

6.8

Vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 3.1 / Impact: 10.0

Source: NVD

Description

BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands.

Affected (56)

Products: Bea: Tuxedo, Weblogic Integration, Weblogic Server, Weblogic Workshop · Oracle: Weblogic Portal

4 products

1 product

Configuration A

56 vulnerable

Vulnerable Software	Affected Versions
Bea Tuxedo	Version 8.0
Bea Tuxedo	Version 8.1
Bea Weblogic Integration	Version 8.1
Bea Weblogic Integration	Version 8.1 sp2
Bea Weblogic Integration	Version 8.1 sp3
Bea Weblogic Integration	Version 8.1 sp4
Bea Weblogic Integration	Version 8.1 sp5
Bea Weblogic Integration	Version 8.1 sp6
Bea Weblogic Integration	Version 9.2
Bea Weblogic Server	Version 5.1
Bea Weblogic Server	Version 6.1
Bea Weblogic Server	Version 6.1 sp1
Bea Weblogic Server	Version 6.1 sp2
Bea Weblogic Server	Version 6.1 sp3
Bea Weblogic Server	Version 6.1 sp4
Bea Weblogic Server	Version 6.1 sp5
Bea Weblogic Server	Version 6.1 sp6
Bea Weblogic Server	Version 6.1 sp7
Bea Weblogic Server	Version 7.0.0.1
Bea Weblogic Server	Version 7.0.0.1 sp1
Bea Weblogic Server	Version 7.0.0.1 sp2
Bea Weblogic Server	Version 7.0.0.1 sp3
Bea Weblogic Server	Version 7.0.0.1 sp4
Bea Weblogic Server	Version 7.0
Bea Weblogic Server	Version 7.0
Bea Weblogic Server	Version 7.0 sp1
Bea Weblogic Server	Version 7.0 sp1
Bea Weblogic Server	Version 7.0 sp2
Bea Weblogic Server	Version 7.0 sp2
Bea Weblogic Server	Version 7.0 sp3
Bea Weblogic Server	Version 7.0 sp3
Bea Weblogic Server	Version 7.0 sp4
Bea Weblogic Server	Version 7.0 sp4
Bea Weblogic Server	Version 7.0 sp5
Bea Weblogic Server	Version 7.0 sp5
Bea Weblogic Server	Version 7.0 sp6
Bea Weblogic Server	Version 7.0 sp6
Bea Weblogic Server	Version 7.0 sp7
Bea Weblogic Server	Version 7.0 sp7
Bea Weblogic Server	Version 8.1
Bea Weblogic Server	Version 8.1 sp1
Bea Weblogic Server	Version 8.1 sp2
Bea Weblogic Server	Version 8.1 sp3
Bea Weblogic Server	Version 8.1 sp4
Bea Weblogic Server	Version 8.1 sp5
Bea Weblogic Server	Version 9.0
Bea Weblogic Server	Version 9.1
Bea Weblogic Server	Version 9.1
Bea Weblogic Server	Version 9.2
Bea Weblogic Server	Version 9.2
Bea Weblogic Workshop	Version 8.1 sp2
Bea Weblogic Workshop	Version 8.1 sp3
Bea Weblogic Workshop	Version 8.1 sp4
Bea Weblogic Workshop	Version 8.1 sp5
Bea Weblogic Workshop	Version 8.1 sp6
Oracle Weblogic Portal	Version 9.2