Unscored CVE-2006-2461 EUVD-2006-2461GHSA-p4hg-w9qj-343r

BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some tr…

Published May 19, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some transmissions from being encrypted via SSL, and allows remote attackers to more easily read potentially sensitive network traffic.

References

20130 third-party-advisory
1016102 vdb-entry
ADV-2006-1828 vdb-entry
BEA06-132.00 vendor-advisory
weblogic-transaction-channel-insecure(26459) vdb-entry