CVE-2006-2461

BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some transmissions from being encrypted via SSL, and allows remote attackers to more easily read potentially sensitive network traffic.

Published: May 19, 2006
Updated: Apr 13, 2023
CVE: CVE-2006-2461
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
bea / weblogic_server	8.1	8.1.x
bea / weblogic_server	8.1-sp3	8.1-sp3.x
bea / weblogic_server	8.1-sp2	8.1-sp2.x
bea / weblogic_server	8.1-sp1	8.1-sp1.x

http://dev2dev.bea.com/pub/advisory/194
http://secunia.com/advisories/20130
http://securitytracker.com/id?1016102
http://www.vupen.com/english/advisories/2006/1828
https://exchange.xforce.ibmcloud.com/vulnerabilities/26459

Vulnerability Database

289,599

CVE-2006-2461