| Vulnerability Name: | CVE-2006-1351 (CCN-25347) | ||||||||
| Assigned: | 2006-03-20 | ||||||||
| Published: | 2006-03-20 | ||||||||
| Updated: | 2017-07-20 | ||||||||
| Summary: | BEA WebLogic Server 6.1 SP7 and earlier allows remote attackers to read arbitrary files via unknown attack vectors related to a "default internal servlet" accessed through HTTP. | ||||||||
| CVSS v3 Severity: | 3.5 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N)
| ||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2006-1351 Source: BEA Type: Patch, Vendor Advisory BEA06-120.00 Source: CCN Type: SA19310 BEA WebLogic Server/Express Two Vulnerabilities Source: SECUNIA Type: Patch, Vendor Advisory 19310 Source: CCN Type: SECTRACK ID: 1015792 WebLogic Server Default Internal Servlet May Let Remote Users Access the Local File System Source: SECTRACK Type: UNKNOWN 1015792 Source: CCN Type: OSVDB ID: 24028 BEA WebLogic Unspecified Internal Servlet Arbitrary File Access Source: BID Type: Patch 17166 Source: CCN Type: BID-17166 BEA WebLogic Server Remote Filesystem Access Vulnerability Source: VUPEN Type: UNKNOWN ADV-2006-1021 Source: XF Type: UNKNOWN weblogic-server-default-servlet(25347) Source: XF Type: UNKNOWN weblogic-server-default-servlet(25347) Source: CCN Type: BEA Systems Inc. Security Advisory: (BEA06-120.00) A default internal servlet allowed local file system access. Source: CCN Type: BEA Systems Inc. Security Advisory: (BEA06-120.01) A default internal servlet allowed local file system access. | ||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||
| BACK | |||||||||