CVE

Id
12950  
CVE No.
CVE-2005-1744  
Status
Candidate  
Description
BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the application without having to log in again, which may be in violation of newly changed security constraints or role mappings.  
Phase
Assigned (20050525)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
93171 12950 CVE-2005-1744 BEA:BEA05-77.00  View
93172 12950 CVE-2005-1744 URL:http://dev2dev.bea.com/pub/advisory/127  View
93173 12950 CVE-2005-1744 BID:13717  View
93174 12950 CVE-2005-1744 URL:http://www.securityfocus.com/bid/13717  View
93175 12950 CVE-2005-1744 VUPEN:ADV-2005-0604  View
93176 12950 CVE-2005-1744 URL:http://www.vupen.com/english/advisories/2005/0604  View
93177 12950 CVE-2005-1744 SECTRACK:1014049  View
93178 12950 CVE-2005-1744 URL:http://securitytracker.com/id?1014049  View
93179 12950 CVE-2005-1744 SECUNIA:15486  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62146 JVNDB-2005-000348 BEA WebLogic Server の Cookie 解析部におけるサービス運用妨害 (DoS) の脆弱性 BEA WebLogic Server には、クラスタ化されたサイトで使用される Cookie 解析コード部の不備のため、Cookie に含まれるホスト名とポート番号の組み合わせのシステムがクラスタシステムに実在しない場合でも、正常に処理を行ってしまう脆弱性が存在します。 CVE-2005-1746 12950 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000348.html  View