CVE-2008-0901 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2008-0901
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-0901

Description: BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been activated, via crafted URLs that indicate whether a guessed password is successful or not.

CVE Status: Candidate

References: ST 1019449 SAID Secunia Advisory: SA29041 MISC http://www.s21sec.com/avisos/s21sec-040-en.txt BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/488686/100/0/threaded BEA http://dev2dev.bea.com/pub/advisory/271

Return to the previous page.