CVE-2005-4752: Medium severity oracle weblogic server vulnerability
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP6 and earlier, might allow local users to gain privileges by using the run-as deployment descriptor element to change the privileges of a web application or EJB from the Deployer security role to the Admin security role.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4752?
CVE-2005-4752 is considered a critical vulnerability as it allows local users to escalate their privileges.
How do I fix CVE-2005-4752?
To fix CVE-2005-4752, upgrade to a patched version of WebLogic Server or WebLogic Express beyond 8.1 SP4 or 7.0 SP6.
Who is affected by CVE-2005-4752?
CVE-2005-4752 affects users running BEA WebLogic Server or WebLogic Express version 8.1 SP4 and earlier, and 7.0 SP6 and earlier.
What impact does CVE-2005-4752 have?
CVE-2005-4752 can allow local users to gain unauthorized access to sensitive applications by changing security roles.
Is CVE-2005-4752 exploitable by remote attackers?
CVE-2005-4752 is not directly exploitable by remote attackers as it requires local access to the system.