PT-2008-2482 · Bea · Bea Weblogic Portal

Publicado 2008-02-21 · Atualizado 2018-10-30 · CVE-2008-0864

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions BEA WebLogic Portal versions 8.1 SP3 through 8.1 SP6

Description The issue allows remote attackers to bypass intended access restrictions due to inadvertently removed entitlements for pages when an administrator edits the page definition label.

Recommendations For BEA WebLogic Portal versions 8.1 SP3 through 8.1 SP6, consider restricting access to page definition editing until a fix is available to prevent unintended removal of entitlements.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-0864

Produtos afetados

Bea Weblogic Portal

Referências · 5

• http://dev2dev.bea.com/pub/advisory/256 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/0613 · Nota
• http://secunia.com/advisories/29041 · Nota
• http://securitytracker.com/id?1019454 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0864 · Nota de Segurança