NVD

Id
70345  
Name
CVE-2005-4756  
Description
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not properly validate derived Principals with multiple PrincipalValidators, which might allow attackers to gain privileges.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-12-31  
Modified Date
2008-09-05  
Seq
2005-4756  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
362645 70345 CVE-2005-4756 BEA05-92.00  View
362646 70345 CVE-2005-4756 15052  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62373 JVNDB-2005-000575 BEA 製品におけるサブジェクトに格納されたプリンシパルを不正に改ざんされる脆弱性 ------------ CVE-2005-4756 15958 CVE-2005-4756 70345 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000575.html 2005-10-10 2007-04-01 View