Description
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0 and 8.1 through SP5 allows malicious EJBs or servlet applications to decrypt system passwords, possibly by accessing functionality that should have been restricted.
References
- ADV-2006-0313 vdb-entry
- BEA06-114.00 vendor-advisory
- 1015528 vdb-entry
- 18592 third-party-advisory
- 22774 vdb-entry
- weblogic-servlets-obtain-information(24291) vdb-entry
- 16358 vdb-entry