CVE-2007-2697

Опубликовано: 16 мая 2007

Источник: nvd

CVSS2: 5.1

EPSS Низкий

Описание

The embedded LDAP server in BEA WebLogic Express and WebLogic Server 7.0 through SP6, 8.1 through SP5, 9.0, and 9.1, when in certain configurations, does not limit or audit failed authentication attempts, which allows remote attackers to more easily conduct brute-force attacks against the administrator password, or flood the server with login attempts and cause a denial of service.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp7:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp5:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:9.0:*:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:9.0:ga:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:9.1:*:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:9.1:ga:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01449

Низкий

5.1 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-w6j8-rrq7-6j99

github

почти 4 года назад