PT-2009-3584 · Oracle · Oracle Weblogic Server

Published 2009-04-15 · Updated 2017-08-17 · CVE-2009-1002

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle BEA WebLogic Server versions 7.0 Gold through SP7 Oracle BEA WebLogic Server versions 8.1 Gold through SP6 Oracle BEA WebLogic Server versions 9.0 Oracle BEA WebLogic Server versions 9.1 Oracle BEA WebLogic Server versions 9.2 Gold through MP3 Oracle BEA WebLogic Server versions 10.0 Gold through MP1 Oracle BEA WebLogic Server version 10.3

Description The issue allows remote attackers to gain privileges via unknown vectors.

Recommendations For Oracle BEA WebLogic Server version 7.0 Gold through SP7, update to a version that is not affected by this issue. For Oracle BEA WebLogic Server version 8.1 Gold through SP6, update to a version that is not affected by this issue. For Oracle BEA WebLogic Server version 9.0, update to a version that is not affected by this issue. For Oracle BEA WebLogic Server version 9.1, update to a version that is not affected by this issue. For Oracle BEA WebLogic Server version 9.2 Gold through MP3, update to a version that is not affected by this issue. For Oracle BEA WebLogic Server version 10.0 Gold through MP1, update to a version that is not affected by this issue. For Oracle BEA WebLogic Server version 10.3, update to a version that is not affected by this issue.

Fix

Related Identifiers

CVE-2009-1002

Affected Products

Oracle Weblogic Server

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2009-1002 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50052 · Note
• http://securitytracker.com/id?1022059 · Note
• http://us-cert.gov/cas/techalerts/TA09-105A.html · Note
• http://oracle.com/technetwork/topics/security/cpuapr2009-099563.html · Note
• http://securityfocus.com/bid/34461 · Note
• http://oracle.com/technology/deploy/security/wls-security/1002.html · Note