BEA WebLogic Operator/Admin Password Disclosure Vulnerability

Summary
The remote web server is running WebLogic. BEA WebLogic Server and WebLogic Express are reported prone to a vulnerability that may result in the disclosure of Operator or Admin passwords. An attacker who has interactive access to the affected managed server, may potentially exploit this issue in a timed attack to harvest credentials when the managed server fails during the boot process.
Solution
http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_51.00.jsp