9.8

CVE-2005-1744

EPSS 0.73%
Veröffentlicht 24.05.2005 04:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the application without having to log in again, which may be in violation of newly changed security constraints or role mappings.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Bea ≫ Weblogic Server Version <= 7.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.73%	0.702

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-459 Incomplete Cleanup

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

http://secunia.com/advisories/15486

Vendor Advisory

Broken Link

http://securitytracker.com/id?1014049

Third Party Advisory

Broken Link

VDB Entry

http://www.securityfocus.com/bid/13717

Third Party Advisory

Broken Link

VDB Entry

http://dev2dev.bea.com/pub/advisory/127

Product

http://www.vupen.com/english/advisories/2005/0604

Broken Link

https://nvd.nist.gov/vuln/detail/CVE-2005-1744

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-1744

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-1744

EUVD