CVE-2006-0432

EUVD-2006-0439 · Published Jan 25, 2006

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0, when an Administrator uses the WebLogic Administration Console to add custom security policies, causes incorrect policies to be created, which prevents the server from properly protecting JNDI resources.

Technologies

Bea Weblogic Server

Weaknesses

NVD-CWE-Other

CVSS scores

v2.02.1AV:L/AC:L/Au:N/C:N/I:P/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation

T1068Exploitation for Privilege Escalation

References

http://dev2dev.bea.com/pub/advisory/176
http://secunia.com/advisories/18592
http://securitytracker.com/id?1015528
http://www.securityfocus.com/bid/16358
http://www.vupen.com/english/advisories/2006/0313
https://exchange.xforce.ibmcloud.com/vulnerabilities/24299

Potentially impacted assets

See if this affects your attack surface