PT-2005-5422 · Bea · Bea Weblogic Server+1

Publicado 2005-12-31 · Atualizado 2008-09-05 · CVE-2005-4759

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions BEA WebLogic Server and WebLogic Express versions 7.0 through 8.1

Description The issue arises during migration across operating system platforms, where the system fails to warn the administrative user about platform differences in URLResource case sensitivity. This oversight might cause local users to inadvertently lose protection of Web Application pages.

Recommendations For versions 7.0 through 8.1, ensure that administrative users are aware of potential case sensitivity differences in URLResource when migrating across operating system platforms to prevent unintended loss of Web Application page protection.

Correção

Identificadores relacionados

CVE-2005-4759

Produtos afetados

Bea Weblogic Server

Weblogic Express

Referências · 5

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4759 · Nota
• http://securityfocus.com/bid/15052 · Nota
• http://secunia.com/advisories/17138 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-4759 · Nota de Segurança
• http://dev2dev.bea.com/pub/advisory/149 · Aviso do Fabricante