CVE-2001-1477: Medium severity Bea Tuxedo vulnerability

Published Dec 31, 2001

Updated

The Domain gateway in BEA Tuxedo 7.1 does not perform authorization checks for imported services and qspaces on remote domains, even when an ACL exists, which allows users to access services in a remote domain.

Affected Software

1 affected component

Bea Tuxedo=7.1

Remediation

Patch Available

http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA00-08.jsp

Event History

Dec 31, 2001

CVE Published

05:00 AM

May 10, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1477?

CVE-2001-1477 is classified as a high severity vulnerability due to unauthorized access to services in remote domains.

How do I fix CVE-2001-1477?

To fix CVE-2001-1477, ensure proper authorization checks are implemented for imported services and qspaces on remote domains.

What software versions are affected by CVE-2001-1477?

CVE-2001-1477 affects BEA Tuxedo version 7.1.

What impact does CVE-2001-1477 have on security?

CVE-2001-1477 allows unauthorized users to access sensitive services across remote domains, leading to potential data breaches.

Can CVE-2001-1477 be mitigated without updating software?

Mitigating CVE-2001-1477 without updating software may involve implementing stricter network controls and monitoring to limit unauthorized access.