CVE-2005-4759

BEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system platforms, do not warn the administrative user about platform differences in URLResource case sensitivity, which might cause local users to inadvertently lose protection of Web Application pages.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://dev2dev.bea.com/pub/advisory/149	Patch Vendor Advisory
http://secunia.com/advisories/17138	Vendor Advisory
http://www.securityfocus.com/bid/15052
http://dev2dev.bea.com/pub/advisory/149	Patch Vendor Advisory
http://secunia.com/advisories/17138	Vendor Advisory
http://www.securityfocus.com/bid/15052

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:bea:weblogic_server:7.0:::::::*
	cpe:2.3:a:bea:weblogic_server:7.0::express:::::
	cpe:2.3:a:bea:weblogic_server:8.1:::::::*
	cpe:2.3:a:bea:weblogic_server:8.1::express:::::

History

21 Nov 2024, 00:05

Type	Values Removed	Values Added
References	~~() http://dev2dev.bea.com/pub/advisory/149 - Patch, Vendor Advisory~~	() http://dev2dev.bea.com/pub/advisory/149 - Patch, Vendor Advisory
References	~~() http://secunia.com/advisories/17138 - Vendor Advisory~~	() http://secunia.com/advisories/17138 - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/15052 -~~	() http://www.securityfocus.com/bid/15052 -

Information

Published : 2005-12-31 05:00

Updated : 2024-11-21 00:05

NVD link : CVE-2005-4759

Mitre link : CVE-2005-4759

CVE.ORG link : CVE-2005-4759

JSON object : View

Products Affected

bea

weblogic_server

CWE

NVD-CWE-Other

{"id": "CVE-2005-4759", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-12-31T05:00:00.000", "references": [{"url": "http://dev2dev.bea.com/pub/advisory/149", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/17138", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/15052", "source": "cve@mitre.org"}, {"url": "http://dev2dev.bea.com/pub/advisory/149", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/17138", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/15052", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "BEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system platforms, do not warn the administrative user about platform differences in URLResource case sensitivity, which might cause local users to inadvertently lose protection of Web Application pages."}], "lastModified": "2024-11-21T00:05:06.830", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9C5AFCF-79D8-4005-B800-B0C6BD461276"}, {"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FBDF3AC0-0680-4EEE-898C-47D194667BE2"}, {"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E08D4CEA-9ACC-4869-BC87-3524A059914F"}, {"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}