CVE

Id
23789  
CVE No.
CVE-2007-0432  
Status
Candidate  
Description
BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages to a proxy service, which might allow remote attackers to bypass authorization policies and route requests to back-end services or conduct other unauthorized activities.  
Phase
Assigned (20070122)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
231075 23789 CVE-2007-0432 BEA:BEA07-157.00  View
231076 23789 CVE-2007-0432 URL:http://dev2dev.bea.com/pub/advisory/224  View
231077 23789 CVE-2007-0432 BID:22082  View
231078 23789 CVE-2007-0432 URL:http://www.securityfocus.com/bid/22082  View
231079 23789 CVE-2007-0432 OSVDB:32862  View
231080 23789 CVE-2007-0432 URL:http://osvdb.org/32862  View
231081 23789 CVE-2007-0432 SECTRACK:1017523  View
231082 23789 CVE-2007-0432 URL:http://securitytracker.com/id?1017523  View
231083 23789 CVE-2007-0432 SECUNIA:23786  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52742 JVNDB-2007-001434 BEA AquaLogic Enterprise Security における攻撃の検出を回避される脆弱性 BEA AquaLogic Enterprise Security は、システム負荷が高い際、監査イベントの重要度を適切に設定しないため、攻撃の検出を回避される脆弱性が存在します。 CVE-2007-0434 23789 4.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001434.html  View