CVE-2005-2680

First published: Tue Aug 23 2005(Updated: )

Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP4, when using entitlements, allows remote attackers to bypass access restrictions for the pages of a Book via crafted URLs.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Oracle Weblogic Portal	=8.1
Oracle Weblogic Portal	=8.1-sp1
Oracle Weblogic Portal	=8.1-sp2
Oracle Weblogic Portal	=8.1-sp3
Oracle Weblogic Portal	=8.1-sp4

Remedy

http://dev2dev.bea.com/pub/advisory/137

Never miss a vulnerability like this again

Reference Links

http://dev2dev.bea.com/pub/advisory/137

collector/nvd-historical
collector/nvd-index
agent/references
agent/severity
agent/weakness
agent/author
agent/description
agent/type
agent/remedy
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
agent/event
agent/tags
collector/mitre-cve
source/MITRE
vendor/oracle
canonical/oracle weblogic portal
version/oracle weblogic portal/8.1
version/oracle weblogic portal/8.1-sp1
version/oracle weblogic portal/8.1-sp2
version/oracle weblogic portal/8.1-sp3
version/oracle weblogic portal/8.1-sp4

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.