VULNERABILITY INTELLIGENCE

CVE-2006-2464

CVSS score4.6 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2006-05-19
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

stopWebLogic.sh in BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6 displays the administrator password to stdout when executed, which allows local users to obtain the password by viewing a local display.

Primary references