CVE-2005-4758: Medium severity oracle weblogic server vulnerability

Published Dec 31, 2005

Updated

Unspecified vulnerability in the Administration server in BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier allows remote authenticated Admin users to read arbitrary files via unknown attack vectors related to an "internal servlet" accessed through HTTP.

Affected Software

8 affected components

Bea WebLogic Server=8.1

Bea WebLogic Server=8.1-sp1

Bea WebLogic Server=8.1-sp2

Bea WebLogic Server=8.1-sp3

Remediation

Patch Available

http://dev2dev.bea.com/pub/advisory/148

Event History

Dec 31, 2005

CVE Published

05:00 AM

Apr 1, 2006

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-4758?

CVE-2005-4758 has been classified as a high severity vulnerability due to its potential impact on sensitive data.

How do I fix CVE-2005-4758?

To mitigate CVE-2005-4758, it is recommended to upgrade to a newer version of BEA WebLogic Server after applying the necessary patches.

Who is affected by CVE-2005-4758?

CVE-2005-4758 affects users of BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier versions.

What are the implications of CVE-2005-4758?

The implications of CVE-2005-4758 include the risk of unauthorized access to sensitive files by remote authenticated users.

What components are involved in CVE-2005-4758?

CVE-2005-4758 involves the Administration server in BEA WebLogic Server and WebLogic Express, specifically through an internal servlet accessed via HTTP.