PT-2009-3585 · Bea · Bea Product Suite

Published 2009-04-15 · Updated 2017-08-17 · CVE-2009-1003

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions BEA Product Suite versions 9.0, 9.1, 9.2 MP3, 10.0 MP1, 10.3

Description The issue affects the integrity of the system, related to access to source code of web pages, but the specific details of the vulnerability are not provided.

Recommendations For BEA Product Suite version 9.0, update to a version that addresses the issue. For BEA Product Suite version 9.1, update to a version that addresses the issue. For BEA Product Suite version 9.2 MP3, update to a version that addresses the issue. For BEA Product Suite version 10.0 MP1, update to a version that addresses the issue. For BEA Product Suite version 10.3, update to a version that addresses the issue.

Fix

Related Identifiers

CVE-2009-1003

Affected Products

Bea Product Suite

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2009-1003 · Security Note
• http://securitytracker.com/id?1022059 · Note
• http://us-cert.gov/cas/techalerts/TA09-105A.html · Note
• http://securityfocus.com/bid/34461 · Note
• http://oracle.com/technology/deploy/security/wls-security/1003.html · Note
• http://oracle.com/technetwork/topics/security/cpuapr2009-099563.html · Note
• http://osvdb.org/53762 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50054 · Note