CVE-2008-0863
BEA WebLogic Server and WebLogic Express 9.0 and 9.1 exposes the web service's WSDL and security policies, which allows remote attackers to obtain sensitive information and potentially launch further attacks.
- Score
- CVSS 2.0 5.0 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2008-02-21
- Last modified
- 2024-08-07
- Weaknesses
- CWE-200
Affected products
References
- http://dev2dev.bea.com/pub/advisory/260
- http://www.securitytracker.com/id?1019455
- http://www.vupen.com/english/advisories/2008/0612/references
