Lucene search
HistoryFeb 21, 2008 - 1:44 a.m.
CVE-2008-0864
cve-2008-0864
bea weblogic portal
admin tools
entitlements
remote attackers
access restrictions
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.0%
Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definition label, which might allow remote attackers to bypass intended access restrictions.
Affected configurations
Node
bea_systemsweblogic_portalMatch8.1_sp6
ORoracleweblogic_portalMatch8.1sp3
ORoracleweblogic_portalMatch8.1sp4
ORoracleweblogic_portalMatch8.1sp5
Related
prion
prion
Design/Logic Flaw
2008-02-21 01:44:00
cvelist
cvelist
CVE-2008-0864
2008-02-21 01:00:00
nvd
nvd
CVE-2008-0864
2008-02-21 01:44:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.0%
Related for CVE-2008-0864