CVE-2008-0864
First published: Thu Feb 21 2008(Updated: )
Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definition label, which might allow remote attackers to bypass intended access restrictions.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Bea Systems Weblogic Portal | =8.1_sp6 | |
| Oracle Weblogic Portal | =8.1-sp3 | |
| Oracle Weblogic Portal | =8.1-sp4 | |
| Oracle Weblogic Portal | =8.1-sp5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/author
- agent/severity
- agent/weakness
- agent/type
- agent/event
- agent/references
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/bea systems
- canonical/bea systems weblogic portal
- version/bea systems weblogic portal/8.1_sp6
- vendor/oracle
- canonical/oracle weblogic portal
- version/oracle weblogic portal/8.1-sp3
- version/oracle weblogic portal/8.1-sp4
- version/oracle weblogic portal/8.1-sp5