PT-2005-5422 · Bea · Bea Weblogic Server+1

Published 2005-12-31 · Updated 2008-09-05 · CVE-2005-4759

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions BEA WebLogic Server and WebLogic Express versions 7.0 through 8.1

Description The issue arises during migration across operating system platforms, where the system fails to warn the administrative user about platform differences in URLResource case sensitivity. This oversight might cause local users to inadvertently lose protection of Web Application pages.

Recommendations For versions 7.0 through 8.1, ensure that administrative users are aware of potential case sensitivity differences in URLResource when migrating across operating system platforms to prevent unintended loss of Web Application page protection.

Fix

Related Identifiers

CVE-2005-4759

Affected Products

Bea Weblogic Server

Weblogic Express

References · 5

• http://secunia.com/advisories/17138 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4759 · Security Note
• http://dev2dev.bea.com/pub/advisory/149 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4759 · Note
• http://securityfocus.com/bid/15052 · Note