Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
BEA WebLogic Server 6.1, 7.0 and 7.0.0.1, when routing messages to a JMS target domain that is inaccessible, may leak the user's password when it throws a ResourceAllocationException.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WebLogic ResourceAllocationException系统密码泄露漏洞
Vulnerability Description
BEA Systems WebLogic Server是一款稳定、易于管理的电子商务系统的平台,提供对Enterprise Javabeans(EJB)和J2EE广泛支持,可使用在Windows和大多数Unix/Linux操作系统上。 BEA Systems在处理异常输出时存在问题,远程攻击者可以利用这个漏洞获得系统密码信息。 当应用程序尝试把JSM消息路由通过网桥时,无论JMS目标域不存在或是配置问题不能获得JMS目标域的初始化上下文,WebLogic Server都会产生ResourceAllocat
CVSS Information
N/A
Vulnerability Type
N/A