PT-2006-3418 · Bea · Bea Weblogic Server
CVE-2006-2470
·
Publicado
2006-05-19
·
Atualizado
2017-07-20
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
BEA WebLogic Server version 9.0
Description
The issue prevents the WebLogic Server Administration Console from setting custom JDBC security policies correctly. This could allow attackers to bypass intended policies.
Recommendations
For BEA WebLogic Server version 9.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Bea Weblogic Server