PT-2006-1495 · Bea · Bea Weblogic Portal

Publicado 2006-01-25 · Atualizado 2018-10-30 · CVE-2006-0428

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BEA WebLogic Portal versions 8.1 SP3 through 8.1 SP5

Description The issue allows remote attackers to access restricted web resources via crafted URLs when using Web Services Remote Portlets (WSRP).

Recommendations For BEA WebLogic Portal versions 8.1 SP3 through 8.1 SP5, consider restricting access to WSRP until a fix is available.

Correção

Identificadores relacionados

CVE-2006-0428

Produtos afetados

Bea Weblogic Portal

Referências · 8

• http://vupen.com/english/advisories/2006/0312 · Nota
• http://secunia.com/advisories/18593 · Nota
• http://osvdb.org/22767 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0428 · Nota de Segurança
• http://securityfocus.com/bid/16358 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24293 · Nota
• http://dev2dev.bea.com/pub/advisory/172 · Aviso do Fabricante
• http://securitytracker.com/id?1015528 · Correção