CVE-2006-0421 - By design, BEA WebLogic Server and WebLogic Express 7.0 and 6.1, when creating multiple domains from the same WebLogic instance on the same machine, allows administrators of any created domain to access other created domains, which could allow administrators to gain privileges that were not intended

Back Back to CVE browser

MEDIUM

By design, BEA WebLogic Server and WebLogic Express 7.0 and 6.1, when creating multiple domains from the same WebLogic instance on the same machine, allows administrators of any created domain to access other created domains, which could allow administrators to gain privileges that were not intended

Published Jan 25, 2006

4.6

MEDIUM

CVSS 2.0

EPSS 0.40%

Description

By design, BEA WebLogic Server and WebLogic Express 7.0 and 6.1, when creating multiple domains from the same WebLogic instance on the same machine, allows administrators of any created domain to access other created domains, which could allow administrators to gain privileges that were not intended.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

http://dev2dev.bea.com/pub/advisory/165
vendor-advisoryx_refsource_BEAPatchVendor Advisory
http://secunia.com/advisories/18581
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://securitytracker.com/id?1015528
vdb-entryx_refsource_SECTRACKPatch
http://www.securityfocus.com/bid/16358
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/0313
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0428
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24286
vdb-entryx_refsource_XF

Link	Providers	Tags
http://dev2dev.bea.com/pub/advisory/165		vendor-advisoryx_refsource_BEAPatchVendor Advisory
http://secunia.com/advisories/18581		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://securitytracker.com/id?1015528		vdb-entryx_refsource_SECTRACKPatch
http://www.securityfocus.com/bid/16358		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/0313		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0428		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24286		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 25, 2006

Updated Aug 7, 2024

Reserved Jan 25, 2006

Link CVE-2006-0421

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-0421

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jan 25, 2006

Updated Aug 7, 2024

Link EUVD-2006-0428

GitHub

No data