PT-2006-1495 · Bea · Bea Weblogic Portal

Published 2006-01-25 · Updated 2018-10-30 · CVE-2006-0428

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BEA WebLogic Portal versions 8.1 SP3 through 8.1 SP5

Description The issue allows remote attackers to access restricted web resources via crafted URLs when using Web Services Remote Portlets (WSRP).

Recommendations For BEA WebLogic Portal versions 8.1 SP3 through 8.1 SP5, consider restricting access to WSRP until a fix is available.

Fix

Related Identifiers

CVE-2006-0428

Affected Products

Bea Weblogic Portal

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2006-0428 · Security Note
• http://dev2dev.bea.com/pub/advisory/172 · Vendor Advisory
• http://securitytracker.com/id?1015528 · Patch
• http://vupen.com/english/advisories/2006/0312 · Note
• http://secunia.com/advisories/18593 · Note
• http://osvdb.org/22767 · Note
• http://securityfocus.com/bid/16358 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24293 · Note