NVD

Id
70906  
Name
CVE-2004-0470  
Description
BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2, when editing weblogic.xml using WebLogic Builder or the SecurityRoleAssignmentMBean.toXML method, inadvertently removes security-role-assignment tags when weblogic.xml does not have a principal-name tag, which can remove intended access restrictions for the associated web application.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-07-07  
Modified Date
2017-07-10  
Seq
2004-0470  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
365895 70906 CVE-2004-0470 http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_59.00.jsp  View
365896 70906 CVE-2004-0470 1010128  View
365897 70906 CVE-2004-0470 VU#950070  View
365898 70906 CVE-2004-0470 10328  View
365899 70906 CVE-2004-0470 weblogic-application-unauth-access(16123)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62841 JVNDB-2004-000183 BEA WebLogic Server の weblogic.xml における意図しない権限付与の脆弱性 BEA WebLogic Server には、コーディングの不備のため、 weblogic.xml ファイル内の タグが削除される脆弱性が存在します。 CVE-2004-0470 8897 CVE-2004-0470 70906 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000183.html 2004-05-11 2007-04-01 View