5
CVE-2008-0864
- EPSS 1.81%
- Veröffentlicht 21.02.2008 01:44:00
- Zuletzt bearbeitet 16.06.2026 22:50:30
- Erkennungen
LoginAdmin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definition label, which might allow remote attackers to bypass intended access restrictions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bea Systems ≫ Weblogic Portal Version 8.1_sp6
Oracle ≫ Weblogic Portal Version 8.1 Update sp3
Oracle ≫ Weblogic Portal Version 8.1 Update sp4
Oracle ≫ Weblogic Portal Version 8.1 Update sp5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.81% | 0.758 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
http://www.vupen.com/english/advisories/2008/0613
http://secunia.com/advisories/29041
http://dev2dev.bea.com/pub/advisory/256
http://www.securitytracker.com/id?1019454