BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates different login exceptions that suggest why an authentication attempt fails, which makes it easier for remote attackers to guess passwords via brute force attacks.
                
            References
                    | Link | Resource | 
|---|---|
| http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA05-74.00.jsp | Patch Vendor Advisory | 
| http://secunia.com/advisories/14298 | Patch Vendor Advisory | 
| http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA05-74.00.jsp | Patch Vendor Advisory | 
| http://secunia.com/advisories/14298 | Patch Vendor Advisory | 
Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    20 Nov 2024, 23:55
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA05-74.00.jsp - Patch, Vendor Advisory | |
| References | () http://secunia.com/advisories/14298 - Patch, Vendor Advisory | 
Information
                Published : 2005-05-02 04:00
Updated : 2025-04-03 01:03
NVD link : CVE-2005-0432
Mitre link : CVE-2005-0432
CVE.ORG link : CVE-2005-0432
JSON object : View
Products Affected
                bea
- weblogic_server
CWE
                