Vulnerabilities > CVE-2006-2464 - Local Security vulnerability in BEA Weblogic Server 7.0/8.1
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
stopWebLogic.sh in BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6 displays the administrator password to stdout when executed, which allows local users to obtain the password by viewing a local display.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 10 |