CVE-2004-0652

Опубликовано: 06 авг. 2004

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly accessing certain internal methods.

Ссылки

http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_55.00.jsp
http://secunia.com/advisories/11359
http://securitytracker.com/id?1009766
http://www.kb.cert.org/vuls/id/352110
Patch
Third Party Advisory
US Government Resource
http://www.osvdb.org/5296
http://www.securityfocus.com/bid/10133
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15865
http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_55.00.jsp
http://secunia.com/advisories/11359
http://securitytracker.com/id?1009766
http://www.kb.cert.org/vuls/id/352110
Patch
Third Party Advisory
US Government Resource
http://www.osvdb.org/5296
http://www.securityfocus.com/bid/10133
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15865

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:win32:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:win32:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:win32:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*

EPSS

Процентиль: 28%

0.00101

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-v87f-rphr-f72x

github

почти 4 года назад