NVD

Id
67468  
Name
CVE-2005-1744  
Description
BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the application without having to log in again, which may be in violation of newly changed security constraints or role mappings.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-05-24  
Modified Date
2011-03-07  
Seq
2005-1744  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
349445 67468 CVE-2005-1744 BEA05-77.00  View
349446 67468 CVE-2005-1744 1014049  View
349447 67468 CVE-2005-1744 13717  View
349448 67468 CVE-2005-1744 ADV-2005-0604  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62145 JVNDB-2005-000347 BEA WebLogic Server の Web アプリケーションの再デプロイにおけるアクセス制限を回避される脆弱性 BEA WebLogic Server には、Web アプリケーションを再デプロイした際に、Web アプリケーションにアクセスしているユーザのセッションが無効にならない脆弱性が存在します。 CVE-2005-1744 12948 CVE-2005-1744 67468 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000347.html 2005-05-24 2007-04-01 View