CVE-2007-2703 - BEA WebLogic Portal 9.2 GA can corrupt a visitor entitlements role if an administrator provides a lo

CVE-2007-2703

Summary

BEA WebLogic Portal 9.2 GA can corrupt a visitor entitlements role if an administrator provides a long role description, which might allow remote authenticated users to access privileged resources.

References

http://dev2dev.bea.com/pub/advisory/236
http://osvdb.org/36065
http://secunia.com/advisories/25284
http://www.securitytracker.com/id?1018060
http://www.vupen.com/english/advisories/2007/1815
https://exchange.xforce.ibmcloud.com/vulnerabilities/34285

Vulnerable Configurations

cpe:2.3:a:oracle:weblogic_portal:9.2:ga:*:*:*:*:*:*
cpe:2.3:a:oracle:weblogic_portal:9.2:ga:*:*:*:*:*:*

CVSS

Base:	3.6 (as of 30-10-2018 - 16:25)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	HIGH	SINGLE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	NONE

cvss-vector via4

AV:N/AC:H/Au:S/C:P/I:P/A:N

refmap via4

bea	BEA07-167.00
osvdb	36065
sectrack	1018060
secunia	25284
vupen	ADV-2007-1815
xf	weblogic-portal-entitlement-weak-security(34285)

Last major update

30-10-2018 - 16:25

Published

16-05-2007 - 01:19

Last modified

30-10-2018 - 16:25