CVE-2007-5576

BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:bea:tuxedo:8.0:*:*:*:*:*:*:*
cpe:2.3:a:bea:tuxedo:8.1:*:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_integration:8.1:*:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_integration:8.1:sp2:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_integration:8.1:sp3:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_integration:8.1:sp4:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_integration:8.1:sp5:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_integration:8.1:sp6:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_integration:9.2:*:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:5.1:*:enterprise:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:6.1:sp6:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:6.1:sp7:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0:sp7:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0:sp7:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:8.1:sp5:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:9.1:*:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:9.2:*:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:9.2:*:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_workshop:8.1:sp2:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_workshop:8.1:sp3:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_workshop:8.1:sp4:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_workshop:8.1:sp5:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_workshop:8.1:sp6:*:*:*:*:*:*
cpe:2.3:a:oracle:weblogic_portal:9.2:*:*:*:*:*:*:*

History

21 Nov 2024, 00:38

Type Values Removed Values Added
References () http://dev2dev.bea.com/pub/advisory/226 - () http://dev2dev.bea.com/pub/advisory/226 -
References () http://osvdb.org/45478 - () http://osvdb.org/45478 -
References () http://www.vupen.com/english/advisories/2007/1813 - () http://www.vupen.com/english/advisories/2007/1813 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/34290 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/34290 -

Information

Published : 2007-10-18 21:17

Updated : 2024-11-21 00:38


NVD link : CVE-2007-5576

Mitre link : CVE-2007-5576

CVE.ORG link : CVE-2007-5576


JSON object : View

Products Affected

bea

  • weblogic_integration
  • tuxedo
  • weblogic_server
  • weblogic_workshop

oracle

  • weblogic_portal
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor