CVE

Id
9143  
CVE No.
CVE-2004-0715  
Status
Candidate  
Description
The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 does not properly clear member relationships when a group is deleted, which can cause a new group with the same name to have the members of the old group, which allows group members to gain privileges.  
Phase
Assigned (20040720)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
59674 9143 CVE-2004-0715 CONFIRM:http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_52.01.jsp  View
59675 9143 CVE-2004-0715 CERT-VN:VU#470470  View
59676 9143 CVE-2004-0715 URL:http://www.kb.cert.org/vuls/id/470470  View
59677 9143 CVE-2004-0715 BID:10130  View
59678 9143 CVE-2004-0715 URL:http://www.securityfocus.com/bid/10130  View
59679 9143 CVE-2004-0715 OSVDB:5299  View
59680 9143 CVE-2004-0715 URL:http://www.osvdb.org/5299  View
59681 9143 CVE-2004-0715 SECTRACK:1009763  View
59682 9143 CVE-2004-0715 URL:http://securitytracker.com/id?1009763  View
59683 9143 CVE-2004-0715 SECUNIA:11356  View
59684 9143 CVE-2004-0715 URL:http://secunia.com/advisories/11356  View
59685 9143 CVE-2004-0715 XF:weblogic-authentication-gain-privileges(15861)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63622 JVNDB-2003-000348 HP-UX の DCE における任意のコマンドを実行される脆弱性 HP-UX に含まれている DCE には、特定のパケットの処理の不備のため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-0716 9143 10 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000348.html  View