PT-2009-3584 · Oracle · Oracle Weblogic Server

Publicado 2009-04-15 · Atualizado 2017-08-17 · CVE-2009-1002

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle BEA WebLogic Server versions 7.0 Gold through SP7 Oracle BEA WebLogic Server versions 8.1 Gold through SP6 Oracle BEA WebLogic Server versions 9.0 Oracle BEA WebLogic Server versions 9.1 Oracle BEA WebLogic Server versions 9.2 Gold through MP3 Oracle BEA WebLogic Server versions 10.0 Gold through MP1 Oracle BEA WebLogic Server version 10.3

Description The issue allows remote attackers to gain privileges via unknown vectors.

Recommendations For Oracle BEA WebLogic Server version 7.0 Gold through SP7, update to a version that is not affected by this issue. For Oracle BEA WebLogic Server version 8.1 Gold through SP6, update to a version that is not affected by this issue. For Oracle BEA WebLogic Server version 9.0, update to a version that is not affected by this issue. For Oracle BEA WebLogic Server version 9.1, update to a version that is not affected by this issue. For Oracle BEA WebLogic Server version 9.2 Gold through MP3, update to a version that is not affected by this issue. For Oracle BEA WebLogic Server version 10.0 Gold through MP1, update to a version that is not affected by this issue. For Oracle BEA WebLogic Server version 10.3, update to a version that is not affected by this issue.

Correção

Identificadores relacionados

CVE-2009-1002

Produtos afetados

Oracle Weblogic Server

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/50052 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-1002 · Nota de Segurança
• http://securitytracker.com/id?1022059 · Nota
• http://us-cert.gov/cas/techalerts/TA09-105A.html · Nota
• http://oracle.com/technetwork/topics/security/cpuapr2009-099563.html · Nota
• http://securityfocus.com/bid/34461 · Nota
• http://oracle.com/technology/deploy/security/wls-security/1002.html · Nota