CVE-2007-0423: Medium severity Oracle Weblogic Portal vulnerability

Published Jan 23, 2007

Updated

BEA WebLogic Portal 9.2 does not properly handle when an administrator deletes entitlements for a role, which causes other role entitlements to be "inadvertently affected," which has an unknown impact.

Affected Software

1 affected component

Oracle Weblogic Portal=9.2

Remediation

Patch Available

http://dev2dev.bea.com/pub/advisory/218

Event History

Jan 23, 2007

CVE Published

12:28 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0423?

CVE-2007-0423 has a severity level that is not clearly defined, indicating that the impact of the vulnerability is unknown.

How do I fix CVE-2007-0423?

To mitigate the impact of CVE-2007-0423, it is recommended to upgrade to a patched version of BEA WebLogic Portal beyond 9.2.

What does CVE-2007-0423 affect?

CVE-2007-0423 specifically affects BEA WebLogic Portal version 9.2 regarding the handling of role entitlements.

What is the potential impact of CVE-2007-0423?

The potential impact of CVE-2007-0423 includes inadvertently affecting other role entitlements when an administrator deletes entitlements.

Who is affected by CVE-2007-0423?

Administrators using BEA WebLogic Portal version 9.2 may be affected by CVE-2007-0423 due to improper handling of entitlement deletions.