CVE-2005-4757: High severity Bea WebLogic Server vulnerability
BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, do not properly "constrain" a "/" (slash) servlet root URL pattern, which might allow remote attackers to bypass intended servlet protections.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4757?
CVE-2005-4757 has a high severity rating due to the potential for unauthorized access to servlet protections.
How do I fix CVE-2005-4757?
To fix CVE-2005-4757, update to a patched version of BEA WebLogic Server or WebLogic Express, specifically version 8.1 SP4 or later.
Which versions of WebLogic are affected by CVE-2005-4757?
CVE-2005-4757 affects BEA WebLogic Server versions 7.0 SP5 and earlier, as well as 8.1 SP3 and earlier.
What type of vulnerability is CVE-2005-4757?
CVE-2005-4757 is a remote attack vulnerability that allows attackers to bypass servlet protections.
Is there a workaround for CVE-2005-4757?
While patching is the recommended solution for CVE-2005-4757, temporary workarounds may include configuring additional security measures to limit remote access.