Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.11628
Category:Misc.
Title:WebLogic Certificates Spoofing
Summary:NOSUMMARY
Description:Description:

The remote web server is running WebLogic.

There is a bug in this version which may allow an attacker to perform
a man-in-the-middle attack against the remote server by supplying a
self-signed certificate.

An attacker with a legitimate certificate may use this flaw to impersonate
any other user on the remote server.

Solutions : http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-31.jsp
Risk factor : Medium

CopyrightThis script is Copyright (C) 2003 Tenable Network Security

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.