NVD

Id
56733  
Name
CVE-2007-4613  
Description
SSL libraries in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold through SP5 might allow remote attackers to obtain plaintext from an SSL stream via a man-in-the-middle attack that injects crafted data and measures the elapsed time before an error response, a different vulnerability than CVE-2006-2461.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-08-30  
Modified Date
2008-11-13  
Seq
2007-4613  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
289191 56733 CVE-2007-4613 BEA07-134.00  View
289192 56733 CVE-2007-4613 22082  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51998 JVNDB-2007-000661 BEA WebLogic Server の SSL ライブラリにおける平文が漏えいする脆弱性 BEA WebLogic Server の SSL ライブラリには、中間者攻撃により不正な暗号テキストブロックを挿入し、エラーレスポンスが返ってくる経過時間より平文ブロックの内容を推測可能な脆弱性が存在します。 CVE-2007-4613 27968 CVE-2007-4613 56733 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000661.html 2007-01-16 2007-09-13 View