1. CVE-Search
  2. CVE-2005-1745
ID CVE-2005-1745
Summary The UserLogin control in BEA WebLogic Portal 8.1 through Service Pack 3 prints the password to standard output when an incorrect login attempt is made, which could make it easier for attackers to guess the correct password.
References
Vulnerable Configurations
  • cpe:2.3:a:bea:weblogic_server:6.0:*:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.0:*:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.0:*:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.0:*:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.0:*:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.0:sp1:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.0:sp1:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.0:sp1:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.0:sp1:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.0:sp1:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.0:sp1:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.0:sp2:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.0:sp2:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.0:sp2:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.0:sp2:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.0:sp2:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.0:sp2:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp3:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp3:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*
  • cpe:2.3:a:oracle:weblogic_portal:8.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:weblogic_portal:8.0:*:*:*:*:*:*:*
CVSS
Base: 4.6 (as of 30-10-2018 - 16:26)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bea BEA05-78.00
bid 13717
sectrack 1014049
secunia 15486
vupen ADV-2005-0605
Last major update 30-10-2018 - 16:26
Published 24-05-2005 - 04:00
Last modified 30-10-2018 - 16:26
Back to Top