← Voltar para CVEs

CVE-2005-1744

CRITICAL

9.8

Descricao

BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the application without having to log in again, which may be in violation of newly changed security constraints or role mappings.

Detalhes CVE

Pontuacao CVSS v3.19.8

SeveridadeCRITICAL

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado5/24/2005

Ultima modificacao4/16/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

bea:weblogic_server

Fraquezas (CWE)

CWE-459

Referencias

http://dev2dev.bea.com/pub/advisory/127(cve@mitre.org)

http://secunia.com/advisories/15486(cve@mitre.org)

http://securitytracker.com/id?1014049(cve@mitre.org)

http://www.securityfocus.com/bid/13717(cve@mitre.org)

http://www.vupen.com/english/advisories/2005/0604(cve@mitre.org)

http://dev2dev.bea.com/pub/advisory/127(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/15486(af854a3a-2127-422b-91ae-364da2661108)

http://securitytracker.com/id?1014049(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/13717(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2005/0604(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.