PT-2004-3586 · Bea · Bea Weblogic Server+1

Publicado 2004-12-31 · Atualizado 2017-07-29 · CVE-2004-2696

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions BEA WebLogic Server and WebLogic Express versions 6.1, 7.0, and 8.1

Description The issue arises when BEA WebLogic Server and WebLogic Express use Remote Method Invocation (RMI) over Internet Inter-ORB Protocol (IIOP) and fail to properly handle multiple logins for different users coming from the same client. This could lead to an "unexpected user identity" being used in an RMI call.

Recommendations For versions 6.1, 7.0, and 8.1, consider restricting access to RMI calls over IIOP to minimize the risk of exploitation until a proper fix is applied. As a temporary workaround, consider implementing additional authentication mechanisms to ensure the correct user identity is used in RMI calls.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2004-2696

Produtos afetados

Bea Weblogic Server

Weblogic Express

Referências · 8

• http://securitytracker.com/id?1010493 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2696 · Nota
• http://secunia.com/advisories/11865 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-2696 · Nota de Segurança
• http://osvdb.org/7081 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16421 · Nota
• http://dev2dev.bea.com/pub/advisory/59 · Aviso do Fabricante
• http://securityfocus.com/bid/10545 · Nota