CVE

Id
18574  
CVE No.
CVE-2006-2470  
Status
Candidate  
Description
Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attackers to bypass intended policies.  
Phase
Assigned (20060519)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
162194 18574 CVE-2006-2470 BEA:BEA06-126.00  View
162195 18574 CVE-2006-2470 URL:http://dev2dev.bea.com/pub/advisory/188  View
162196 18574 CVE-2006-2470 VUPEN:ADV-2006-1828  View
162197 18574 CVE-2006-2470 URL:http://www.vupen.com/english/advisories/2006/1828  View
162198 18574 CVE-2006-2470 SECUNIA:20130  View
162199 18574 CVE-2006-2470 URL:http://secunia.com/advisories/20130  View
162200 18574 CVE-2006-2470 XF:weblogic-custom-jdbc-insecure(26464)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58094 JVNDB-2006-000290 BEA WebLogic Server における信頼されないアプリケーションを利用して秘密鍵のアクセス制御を回避される脆弱性 BEA WebLogic Server には、ホストされたアプリケーションが制限を回避して秘密鍵にアクセス可能な脆弱性が存在します。 CVE-2006-2472 18574 4.9 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000290.html  View