PT-2005-2714 · Bea · Weblogic Express+1

Published 2005-05-24 · Updated 2018-10-30 · CVE-2005-1742

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions BEA WebLogic Server and WebLogic Express versions 8.1 SP2 through 8.1 SP3

Description The issue allows users with the Monitor security role to shrink or reset JDBC connection pools.

Recommendations For versions 8.1 SP2 and 8.1 SP3, consider restricting the Monitor security role to prevent unauthorized access to JDBC connection pools.

Fix

Related Identifiers

CVE-2005-1742

Affected Products

Weblogic Express

Oracle Weblogic Server

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-1742 · Security Note
• http://secunia.com/advisories/15486 · Vendor Advisory
• http://dev2dev.bea.com/pub/advisory/125 · Vendor Advisory
• http://vupen.com/english/advisories/2005/0602 · Note
• http://securityfocus.com/bid/13717 · Note
• http://securitytracker.com/id?1014049 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1742 · Note