PT-2008-2481 · Bea · Bea Weblogic Server+1

Publicado 2008-02-21 · Atualizado 2011-03-08 · CVE-2008-0863

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions BEA WebLogic Server and WebLogic Express versions 9.0 through 9.1

Description The issue allows remote attackers to obtain sensitive information and potentially launch further attacks by exposing the web service's WSDL and security policies.

Recommendations For versions 9.0 through 9.1, restrict access to the WSDL and security policies to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2008-0863

Produtos afetados

Bea Weblogic Server

Weblogic Express

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-0863 · Nota de Segurança
• http://securitytracker.com/id?1019455 · Nota
• http://vupen.com/english/advisories/2008/0612/references · Nota
• http://dev2dev.bea.com/pub/advisory/260 · Correção, Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0863 · Nota