PT-2005-2714 · Bea · Weblogic Express+1

Publicado 2005-05-24 · Atualizado 2018-10-30 · CVE-2005-1742

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions BEA WebLogic Server and WebLogic Express versions 8.1 SP2 through 8.1 SP3

Description The issue allows users with the Monitor security role to shrink or reset JDBC connection pools.

Recommendations For versions 8.1 SP2 and 8.1 SP3, consider restricting the Monitor security role to prevent unauthorized access to JDBC connection pools.

Correção

Identificadores relacionados

CVE-2005-1742

Produtos afetados

Weblogic Express

Oracle Weblogic Server

Referências · 7

• http://vupen.com/english/advisories/2005/0602 · Nota
• http://securityfocus.com/bid/13717 · Nota
• http://securitytracker.com/id?1014049 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1742 · Nota de Segurança
• http://secunia.com/advisories/15486 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1742 · Nota
• http://dev2dev.bea.com/pub/advisory/125 · Aviso do Fabricante