Description
BEA WebLogic Server 8.1 up to SP4, 7.0 up to SP6, and 6.1 up to SP7 displays the internal IP address of the WebLogic server in the WebLogic Server Administration Console, which allows remote authenticated administrators to determine the address.
References
- weblogic-console-ip-disclosure(26462) vdb-entry
- 20130 third-party-advisory
- ADV-2006-1828 vdb-entry
- 1016099 vdb-entry
- 1016097 vdb-entry
- BEA06-129.00 vendor-advisory