CVE-2005-1744

Опубликовано: 24 мая 2005

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the application without having to log in again, which may be in violation of newly changed security constraints or role mappings.

Ссылки

http://dev2dev.bea.com/pub/advisory/127
Product
http://secunia.com/advisories/15486
Broken Link
Vendor Advisory
http://securitytracker.com/id?1014049
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/13717
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2005/0604
Broken Link
http://dev2dev.bea.com/pub/advisory/127
Product
http://secunia.com/advisories/15486
Broken Link
Vendor Advisory
http://securitytracker.com/id?1014049
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/13717
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2005/0604
Broken Link

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:bea:weblogic_server:*:*:*:*:*:*:*:*

Версия до 7.0 (включая)

EPSS

Процентиль: 72%

0.00725

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-459

Связанные уязвимости

GHSA-r9vw-px66-gx7g