NVD

Id
70907  
Name
CVE-2004-0471  
Description
BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce site restrictions for starting and stopping servers for users in the Admin and Operator security roles, which allows unauthorized users to cause a denial of service (service shutdown).  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-07-18  
Published
2004-07-07  
Modified Date
2017-07-10  
Seq
2004-0471  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
365900 70907 CVE-2004-0471 http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_60.00.jsp  View
365901 70907 CVE-2004-0471 1010129  View
365902 70907 CVE-2004-0471 10327  View
365903 70907 CVE-2004-0471 weblogic-server-policy-bypass(16121)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62842 JVNDB-2004-000184 BEA WebLogic Server における権限のないユーザがシャットダウン可能な脆弱性 BEA WebLogic Server には、WebLogic Server を起動/停止する権限を Admin および Operator のセキュリティロールを割り当てられているユーザの一部に制限した場合、この制限が正しく反映されない脆弱性が存在します。 CVE-2004-0471 8898 CVE-2004-0471 70907 2.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000184.html 2004-05-11 2007-04-01 View