NVD

Id
871  
Name
CVE-2008-0901  
Description
BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been activated, via crafted URLs that indicate whether a guessed password is successful or not.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-02-22  
Modified Date
2011-03-07  
Seq
2008-0901  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
5277 871 CVE-2008-0901 BEA08-197.00  View
5278 871 CVE-2008-0901 http://www.s21sec.com/avisos/s21sec-040-en.txt  View
5279 871 CVE-2008-0901 20080225 S21SEC-040-en: Infinite invalid authentication attempts possible in BEA WebLogic Server  View
5280 871 CVE-2008-0901 1019449  View
5281 871 CVE-2008-0901 ADV-2008-0612  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45821 JVNDB-2008-001131 BEA WebLogic Server における不正な URL によりパスワードを推測される脆弱性 BEA WebLogic Server には、アカウントロックアウトが有効になっている場合でも、不正な URL によりパスワードが正しいかを推測可能な脆弱性が存在します。 CVE-2008-0901 31014 CVE-2008-0901 871 7.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001131.html 2008-02-22 2008-03-04 View