What is the severity of CVE-2004-0715?

CVE-2004-0715 has been classified as a medium severity vulnerability, as it can allow unauthorized access to group memberships.

How do I fix CVE-2004-0715?

To fix CVE-2004-0715, upgrade to a fixed version of BEA WebLogic Server that addresses this vulnerability.

What does CVE-2004-0715 affect?

CVE-2004-0715 affects BEA WebLogic Server and WebLogic Express versions 7.0 through SP4 and 8.1 through SP2.

What are the potential consequences of CVE-2004-0715?

The potential consequence of CVE-2004-0715 is that a newly created group can inherit members from a deleted group, leading to unauthorized access.

Is CVE-2004-0715 an authenticated vulnerability?

Yes, CVE-2004-0715 can be exploited by authenticated users, allowing them to gain access to group memberships they should not have.

Vulnerability/
CVE-2004-0715

medium

5.1

CWE

NVD-CWE-Other

21/7/2004

8/8/2024

CVE-2004-0715

First published: Wed Jul 21 2004(Updated: )

The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 does not properly clear member relationships when a group is deleted, which can cause a new group with the same name to have the members of the old group, which allows group members to gain privileges.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Oracle WebLogic Server	=8.1
Oracle WebLogic Server	=7.0-sp2
Oracle WebLogic Server	=8.1
Oracle WebLogic Server	=7.0-sp4
Oracle WebLogic Server	=7.0
Oracle WebLogic Server	=7.0-sp3
Oracle WebLogic Server	=8.1-sp1
Oracle WebLogic Server	=7.0-sp2
Oracle WebLogic Server	=7.0-sp3
Oracle WebLogic Server	=8.1
Oracle WebLogic Server	=8.1-sp1
Oracle WebLogic Server	=7.0-sp2
Oracle WebLogic Server	=8.1-sp2
Oracle WebLogic Server	=7.0-sp3
Oracle WebLogic Server	=7.0-sp1
Oracle WebLogic Server	=7.0-sp1
Oracle WebLogic Server	=7.0-sp4
Oracle WebLogic Server	=8.1-sp1
Oracle WebLogic Server	=7.0-sp1
Oracle WebLogic Server	=8.1-sp2
Oracle WebLogic Server	=7.0
Oracle WebLogic Server	=8.1-sp2
Oracle WebLogic Server	=7.0
Oracle WebLogic Server	=7.0-sp4

Remedy

http://www.securityfocus.com/bid/10130

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2004-0715?
CVE-2004-0715 has been classified as a medium severity vulnerability, as it can allow unauthorized access to group memberships.
How do I fix CVE-2004-0715?
To fix CVE-2004-0715, upgrade to a fixed version of BEA WebLogic Server that addresses this vulnerability.
What does CVE-2004-0715 affect?
CVE-2004-0715 affects BEA WebLogic Server and WebLogic Express versions 7.0 through SP4 and 8.1 through SP2.
What are the potential consequences of CVE-2004-0715?
The potential consequence of CVE-2004-0715 is that a newly created group can inherit members from a deleted group, leading to unauthorized access.
Is CVE-2004-0715 an authenticated vulnerability?
Yes, CVE-2004-0715 can be exploited by authenticated users, allowing them to gain access to group memberships they should not have.

agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/author
agent/severity
agent/weakness
agent/remedy
agent/references
agent/first-publish-date
agent/description
agent/event
agent/source
agent/tags
collector/nvd-historical
agent/software-canonical-lookup-request
collector/nvd-index
vendor/bea
canonical/oracle weblogic server
version/oracle weblogic server/8.1
version/oracle weblogic server/7.0-sp2
version/oracle weblogic server/7.0-sp4
version/oracle weblogic server/7.0
version/oracle weblogic server/7.0-sp3
version/oracle weblogic server/8.1-sp1
version/oracle weblogic server/8.1-sp2
version/oracle weblogic server/7.0-sp1

Frequently Asked Questions

What is the severity of CVE-2004-0715?
CVE-2004-0715 has been classified as a medium severity vulnerability, as it can allow unauthorized access to group memberships.
How do I fix CVE-2004-0715?
To fix CVE-2004-0715, upgrade to a fixed version of BEA WebLogic Server that addresses this vulnerability.
What does CVE-2004-0715 affect?
CVE-2004-0715 affects BEA WebLogic Server and WebLogic Express versions 7.0 through SP4 and 8.1 through SP2.
What are the potential consequences of CVE-2004-0715?
The potential consequence of CVE-2004-0715 is that a newly created group can inherit members from a deleted group, leading to unauthorized access.
Is CVE-2004-0715 an authenticated vulnerability?
Yes, CVE-2004-0715 can be exploited by authenticated users, allowing them to gain access to group memberships they should not have.

CVE-2004-0715

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2004-0715?

How do I fix CVE-2004-0715?

What does CVE-2004-0715 affect?

What are the potential consequences of CVE-2004-0715?

Is CVE-2004-0715 an authenticated vulnerability?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2004-0715?

How do I fix CVE-2004-0715?

What does CVE-2004-0715 affect?

What are the potential consequences of CVE-2004-0715?

Is CVE-2004-0715 an authenticated vulnerability?