BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates different login exceptions that suggest why an authentication attempt fails, which makes it easier for remote attackers to guess passwords via brute force attacks.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-02-15T05:00:00

Updated: 2024-08-07T21:13:54.244Z

Reserved: 2005-02-15T00:00:00

Link: CVE-2005-0432

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2005-05-02T04:00:00.000

Modified: 2008-09-05T20:46:16.353

Link: CVE-2005-0432

cve-icon Redhat

No data.