NVD

Id
54861  
Name
CVE-2007-2697  
Description
The embedded LDAP server in BEA WebLogic Express and WebLogic Server 7.0 through SP6, 8.1 through SP5, 9.0, and 9.1, when in certain configurations, does not limit or audit failed authentication attempts, which allows remote attackers to more easily conduct brute-force attacks against the administrator password, or flood the server with login attempts and cause a denial of service.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-05-15  
Modified Date
2011-03-07  
Seq
2007-2697  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
278457 54861 CVE-2007-2697 BEA07-161.00  View
278458 54861 CVE-2007-2697 1018057  View
278459 54861 CVE-2007-2697 ADV-2007-1815  View
278460 54861 CVE-2007-2697 weblogic-ldap-brute-force(34291)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51715 JVNDB-2007-000378 BEA WebLogic Server の組み込み LDAP におけるログイン試行を制限または監査しない問題 BEA WebLogic Server の組み込み LDAP サーバには、ログイン試行の回数を制限しない、または監査しない問題があります。 CVE-2007-2697 26052 CVE-2007-2697 54861 5.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000378.html 2007-05-14 2007-05-31 View