Search criteria Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

4 vulnerabilities found for aqualogic_interaction by bea

CVE-2007-6198 (GCVE-0-2007-6198)

Vulnerability from nvd – Published: 2007-12-01 01:00 – Updated: 2024-08-07 15:54
VLAI?
Summary
portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows wildcards in advanced searches for usernames, which allows remote attackers to enumerate valid usernames via the in_tx_fulltext parameter.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://procheckup.com/Vulnerability_PR06-11.php x_refsource_MISC
http://www.securityfocus.com/archive/1/484469/100… mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/26620 vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2007/4040 vdb-entryx_refsource_VUPEN
http://www.securitytracker.com/id?1019004 vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/27840 third-party-advisoryx_refsource_SECUNIA
Date Public ?
2007-11-28 00:00
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T15:54:27.071Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://procheckup.com/Vulnerability_PR06-11.php"
          },
          {
            "name": "20071201 PR06-11: BEA Plumtree portal search facility leaks usernames to unauthenticated users",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/484469/100/0/threaded"
          },
          {
            "name": "26620",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/26620"
          },
          {
            "name": "ADV-2007-4040",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4040"
          },
          {
            "name": "1019004",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1019004"
          },
          {
            "name": "27840",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27840"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-11-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows wildcards in advanced searches for usernames, which allows remote attackers to enumerate valid usernames via the in_tx_fulltext parameter."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://procheckup.com/Vulnerability_PR06-11.php"
        },
        {
          "name": "20071201 PR06-11: BEA Plumtree portal search facility leaks usernames to unauthenticated users",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/484469/100/0/threaded"
        },
        {
          "name": "26620",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/26620"
        },
        {
          "name": "ADV-2007-4040",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4040"
        },
        {
          "name": "1019004",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1019004"
        },
        {
          "name": "27840",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27840"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-6198",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows wildcards in advanced searches for usernames, which allows remote attackers to enumerate valid usernames via the in_tx_fulltext parameter."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://procheckup.com/Vulnerability_PR06-11.php",
              "refsource": "MISC",
              "url": "http://procheckup.com/Vulnerability_PR06-11.php"
            },
            {
              "name": "20071201 PR06-11: BEA Plumtree portal search facility leaks usernames to unauthenticated users",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/484469/100/0/threaded"
            },
            {
              "name": "26620",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/26620"
            },
            {
              "name": "ADV-2007-4040",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4040"
            },
            {
              "name": "1019004",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1019004"
            },
            {
              "name": "27840",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27840"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-6198",
    "datePublished": "2007-12-01T01:00:00.000Z",
    "dateReserved": "2007-11-30T00:00:00.000Z",
    "dateUpdated": "2024-08-07T15:54:27.071Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-6197 (GCVE-0-2007-6197)

Vulnerability from nvd – Published: 2007-12-01 01:00 – Updated: 2024-08-07 15:54
VLAI?
Summary
The Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows remote attackers to obtain version numbers and internal hostnames by reading comments in the HTML source of any page.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Date Public ?
2007-11-28 00:00
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T15:54:27.111Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://procheckup.com/Vulnerability_PR06-08.php"
          },
          {
            "name": "1019005",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1019005"
          },
          {
            "name": "ADV-2007-4040",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4040"
          },
          {
            "name": "20071201 PR06-08: BEA Plumtree portal internal hostname disclosure vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/484467/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://procheckup.com/Vulnerability_PR06-09.php"
          },
          {
            "name": "27840",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27840"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-11-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows remote attackers to obtain version numbers and internal hostnames by reading comments in the HTML source of any page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://procheckup.com/Vulnerability_PR06-08.php"
        },
        {
          "name": "1019005",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1019005"
        },
        {
          "name": "ADV-2007-4040",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4040"
        },
        {
          "name": "20071201 PR06-08: BEA Plumtree portal internal hostname disclosure vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/484467/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://procheckup.com/Vulnerability_PR06-09.php"
        },
        {
          "name": "27840",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27840"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-6197",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows remote attackers to obtain version numbers and internal hostnames by reading comments in the HTML source of any page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://procheckup.com/Vulnerability_PR06-08.php",
              "refsource": "MISC",
              "url": "http://procheckup.com/Vulnerability_PR06-08.php"
            },
            {
              "name": "1019005",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1019005"
            },
            {
              "name": "ADV-2007-4040",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4040"
            },
            {
              "name": "20071201 PR06-08: BEA Plumtree portal internal hostname disclosure vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/484467/100/0/threaded"
            },
            {
              "name": "http://procheckup.com/Vulnerability_PR06-09.php",
              "refsource": "MISC",
              "url": "http://procheckup.com/Vulnerability_PR06-09.php"
            },
            {
              "name": "27840",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27840"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-6197",
    "datePublished": "2007-12-01T01:00:00.000Z",
    "dateReserved": "2007-11-30T00:00:00.000Z",
    "dateUpdated": "2024-08-07T15:54:27.111Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-6198 (GCVE-0-2007-6198)

Vulnerability from cvelistv5 – Published: 2007-12-01 01:00 – Updated: 2024-08-07 15:54
VLAI?
Summary
portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows wildcards in advanced searches for usernames, which allows remote attackers to enumerate valid usernames via the in_tx_fulltext parameter.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://procheckup.com/Vulnerability_PR06-11.php x_refsource_MISC
http://www.securityfocus.com/archive/1/484469/100… mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/26620 vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2007/4040 vdb-entryx_refsource_VUPEN
http://www.securitytracker.com/id?1019004 vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/27840 third-party-advisoryx_refsource_SECUNIA
Date Public ?
2007-11-28 00:00
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T15:54:27.071Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://procheckup.com/Vulnerability_PR06-11.php"
          },
          {
            "name": "20071201 PR06-11: BEA Plumtree portal search facility leaks usernames to unauthenticated users",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/484469/100/0/threaded"
          },
          {
            "name": "26620",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/26620"
          },
          {
            "name": "ADV-2007-4040",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4040"
          },
          {
            "name": "1019004",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1019004"
          },
          {
            "name": "27840",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27840"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-11-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows wildcards in advanced searches for usernames, which allows remote attackers to enumerate valid usernames via the in_tx_fulltext parameter."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://procheckup.com/Vulnerability_PR06-11.php"
        },
        {
          "name": "20071201 PR06-11: BEA Plumtree portal search facility leaks usernames to unauthenticated users",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/484469/100/0/threaded"
        },
        {
          "name": "26620",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/26620"
        },
        {
          "name": "ADV-2007-4040",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4040"
        },
        {
          "name": "1019004",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1019004"
        },
        {
          "name": "27840",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27840"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-6198",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows wildcards in advanced searches for usernames, which allows remote attackers to enumerate valid usernames via the in_tx_fulltext parameter."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://procheckup.com/Vulnerability_PR06-11.php",
              "refsource": "MISC",
              "url": "http://procheckup.com/Vulnerability_PR06-11.php"
            },
            {
              "name": "20071201 PR06-11: BEA Plumtree portal search facility leaks usernames to unauthenticated users",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/484469/100/0/threaded"
            },
            {
              "name": "26620",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/26620"
            },
            {
              "name": "ADV-2007-4040",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4040"
            },
            {
              "name": "1019004",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1019004"
            },
            {
              "name": "27840",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27840"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-6198",
    "datePublished": "2007-12-01T01:00:00.000Z",
    "dateReserved": "2007-11-30T00:00:00.000Z",
    "dateUpdated": "2024-08-07T15:54:27.071Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-6197 (GCVE-0-2007-6197)

Vulnerability from cvelistv5 – Published: 2007-12-01 01:00 – Updated: 2024-08-07 15:54
VLAI?
Summary
The Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows remote attackers to obtain version numbers and internal hostnames by reading comments in the HTML source of any page.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Date Public ?
2007-11-28 00:00
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T15:54:27.111Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://procheckup.com/Vulnerability_PR06-08.php"
          },
          {
            "name": "1019005",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1019005"
          },
          {
            "name": "ADV-2007-4040",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4040"
          },
          {
            "name": "20071201 PR06-08: BEA Plumtree portal internal hostname disclosure vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/484467/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://procheckup.com/Vulnerability_PR06-09.php"
          },
          {
            "name": "27840",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27840"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-11-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows remote attackers to obtain version numbers and internal hostnames by reading comments in the HTML source of any page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://procheckup.com/Vulnerability_PR06-08.php"
        },
        {
          "name": "1019005",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1019005"
        },
        {
          "name": "ADV-2007-4040",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4040"
        },
        {
          "name": "20071201 PR06-08: BEA Plumtree portal internal hostname disclosure vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/484467/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://procheckup.com/Vulnerability_PR06-09.php"
        },
        {
          "name": "27840",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27840"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-6197",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows remote attackers to obtain version numbers and internal hostnames by reading comments in the HTML source of any page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://procheckup.com/Vulnerability_PR06-08.php",
              "refsource": "MISC",
              "url": "http://procheckup.com/Vulnerability_PR06-08.php"
            },
            {
              "name": "1019005",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1019005"
            },
            {
              "name": "ADV-2007-4040",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4040"
            },
            {
              "name": "20071201 PR06-08: BEA Plumtree portal internal hostname disclosure vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/484467/100/0/threaded"
            },
            {
              "name": "http://procheckup.com/Vulnerability_PR06-09.php",
              "refsource": "MISC",
              "url": "http://procheckup.com/Vulnerability_PR06-09.php"
            },
            {
              "name": "27840",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27840"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-6197",
    "datePublished": "2007-12-01T01:00:00.000Z",
    "dateReserved": "2007-11-30T00:00:00.000Z",
    "dateUpdated": "2024-08-07T15:54:27.111Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}