CVE-2003-1290 in WebLogicinfo

Summary

BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup enabled, allows remote attackers to obtain configuration information by accessing MBeanHome via the Java Naming and Directory Interface (JNDI).

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

01/13/2006

Disclosure

12/31/2003

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

IDVulnerabilityCWEExpCouCVE
1973BEA WebLogic MBeansHome information disclosure
 
Not definedOfficial fixCVE-2003-1290
393BEA WebLogic JMS Provider
 
Not definedOfficial fixCVE-2003-1290
392BEA WebLogic T3 via SSL
 
Not definedOfficial fixCVE-2003-1290

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

Sources

◂ PreviousOverviewNext ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!