Description
BEA WebLogic Server 6.1, 7.0 and 7.0.0.1, when routing messages to a JMS target domain that is inaccessible, may leak the user's password when it throws a ResourceAllocationException.
References
- 6586 vdb-entry
- VU#331937 third-party-advisory
- http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-24.jsp
- weblogic-error-password-disclosure(11057) vdb-entry