CVE-2005-1743: High severity Bea WebLogic Server vulnerability
BEA WebLogic Server and WebLogic Express 8.1 through Service Pack 3 and 7.0 through Service Pack 5 does not properly handle when a security provider throws an exception, which may cause WebLogic to use incorrect identity for the thread, or to fail to audit security exceptions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1743?
The severity of CVE-2005-1743 is classified as critical due to its potential impact on security identity management.
How do I fix CVE-2005-1743?
To fix CVE-2005-1743, apply the recommended patches and updates provided by BEA for the affected WebLogic Server versions.
What versions of WebLogic are affected by CVE-2005-1743?
CVE-2005-1743 affects BEA WebLogic Server and WebLogic Express versions 6.0 through 8.1, including various service packs.
What are the potential risks of CVE-2005-1743?
The risks associated with CVE-2005-1743 include unauthorized access and improper handling of security exceptions, which can compromise security auditing.
Is CVE-2005-1743 still relevant today?
While CVE-2005-1743 is an older vulnerability, it remains relevant for organizations using unsupported versions of WebLogic that have not mitigated this issue.