Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The HTTP handlers in BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7 stores the username and password in cleartext in the WebLogic Server log when access to a web application or protected JWS fails, which allows attackers to gain privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BEA WebLogic Server HTTP handler 信息泄露漏洞
Vulnerability Description
BEA WebLogic Server 9.0, 8.1到SP5, 7.0到SP6, 以及6.1 到SP7的HTTP handler在访问web应用程序或受保护的JWS失败时，将明文的用户名和密码储存在WebLogic Server日志中，这会使攻击者获得特权。
CVSS Information
N/A
Vulnerability Type
N/A