Description
BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allows remote authenticated guest users to read the server log and obtain sensitive configuration information.
References
- BEA06-111.00 vendor-advisory
- ADV-2006-0313 vdb-entry
- weblogic-server-log-disclosure(24295) vdb-entry
- 22776 vdb-entry
- 1015528 vdb-entry
- 18592 third-party-advisory
- 16358 vdb-entry