Lucene search
MitreCVE-2008-0901HistoryFeb 22, 2008 - 9:44 p.m.
CVE-2008-0901
2008-02-2221:44:00
CWE-200
CWE-255
mitre
web.nvd.nist.gov
24
cve-2008-0901
security
remote attack
bea weblogic server
password guessing
nvd
CVSS2
7.1
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:C/I:N/A:N
AI Score
6.9
Confidence
High
EPSS
0.007
Percentile
80.9%
BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been activated, via crafted URLs that indicate whether a guessed password is successful or not.
Affected configurations
Node
beaweblogic_serverMatch7.0
ORbeaweblogic_serverMatch7.0sp1
ORbeaweblogic_serverMatch7.0sp2
ORbeaweblogic_serverMatch7.0sp3
ORbeaweblogic_serverMatch7.0sp4
ORbeaweblogic_serverMatch7.0sp5
ORbeaweblogic_serverMatch7.0sp6
ORbeaweblogic_serverMatch7.0sp7
ORbeaweblogic_serverMatch8.1
ORbeaweblogic_serverMatch8.1sp1
ORbeaweblogic_serverMatch8.1sp2
ORbeaweblogic_serverMatch8.1sp3
ORbeaweblogic_serverMatch8.1sp4
ORbeaweblogic_serverMatch8.1sp5
ORbeaweblogic_serverMatch8.1sp6
ORbeaweblogic_serverMatch9.0
ORbeaweblogic_serverMatch9.1
ORbeaweblogic_serverMatch9.2
ORbeaweblogic_serverMatch9.2mp1
ORbeaweblogic_serverMatch9.2mp2
ORbeaweblogic_serverMatch10.0
ORbea_systemsweblogic_serverMatch10.0_mp1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| bea | weblogic_server | 7.0 | cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:* |
| bea | weblogic_server | 7.0 | cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:* |
| bea | weblogic_server | 7.0 | cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:* |
| bea | weblogic_server | 7.0 | cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:* |
| bea | weblogic_server | 7.0 | cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:* |
| bea | weblogic_server | 7.0 | cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:* |
| bea | weblogic_server | 7.0 | cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:* |
| bea | weblogic_server | 7.0 | cpe:2.3:a:bea:weblogic_server:7.0:sp7:*:*:*:*:*:* |
| bea | weblogic_server | 8.1 | cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:* |
| bea | weblogic_server | 8.1 | cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:* |
Related
prion
prion
Default credentials
2008-02-22 21:44:00
cvelist
cvelist
CVE-2008-0901
2008-02-22 21:00:00
nvd
nvd
CVE-2008-0901
2008-02-22 21:44:00
CVSS2
7.1
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:C/I:N/A:N
AI Score
6.9
Confidence
High
EPSS
0.007
Percentile
80.9%
Related for CVE-2008-0901