Unscored CVE-2005-4764 EUVD-2005-4757GHSA-p2q5-v57c-8gw3

BEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after multiple incorrect password guesses, which…

Published Apr 1, 2006 · Updated Sep 17, 2024 · Assigned by mitre

Description

BEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after multiple incorrect password guesses, which allows remote attackers who know or guess the admin account name to cause a denial of service (blocked admin logins).

References

BEA05-101.00 vendor-advisory
15052 vdb-entry
17138 third-party-advisory