CVE-2005-4759: Medium severity oracle weblogic server vulnerability

Published Dec 31, 2005

Updated

BEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system platforms, do not warn the administrative user about platform differences in URLResource case sensitivity, which might cause local users to inadvertently lose protection of Web Application pages.

Affected Software

4 affected components

Bea WebLogic Server=8.1

Bea WebLogic Server=7.0

Remediation

Patch Available

http://dev2dev.bea.com/pub/advisory/149

Event History

Dec 31, 2005

CVE Published

05:00 AM

Apr 1, 2006

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-4759?

CVE-2005-4759 is considered a moderate severity vulnerability due to potential exposure of web application resources.

How do I fix CVE-2005-4759?

To mitigate CVE-2005-4759, ensure that administrative users are aware of the URLResource case sensitivity differences during platform migrations.

What versions are affected by CVE-2005-4759?

CVE-2005-4759 affects BEA WebLogic Server and WebLogic Express versions 8.1 and 7.0.

What risks are associated with CVE-2005-4759?

The risk associated with CVE-2005-4759 includes local users losing access protection to web application pages due to case sensitivity issues.

Is CVE-2005-4759 a persistent vulnerability?

CVE-2005-4759 is not persistent; it arises specifically during migrations across different operating system platforms.