Description
BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6, may send sensitive data over non-secure channels when using JTA transactions, which allows remote attackers to read potentially sensitive network traffic.
References
- 20130 third-party-advisory
- BEA06-133.00 vendor-advisory
- weblogic-jta-transactions-disclosure(26458) vdb-entry
- ADV-2006-1828 vdb-entry
- 1016103 vdb-entry