What is the severity of CVE-2008-0904?

CVE-2008-0904 is classified as a medium severity vulnerability due to its potential to allow unauthorized file access.

How do I fix CVE-2008-0904?

To mitigate CVE-2008-0904, it is recommended to upgrade to the latest versions of BEA Plumtree Collaboration and AquaLogic Interaction that contain patches.

Which versions are affected by CVE-2008-0904?

CVE-2008-0904 affects BEA Plumtree Collaboration versions 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1.

Can CVE-2008-0904 be exploited remotely?

Yes, CVE-2008-0904 can be exploited remotely by sending crafted URLs to the vulnerable application.

What type of files can be accessed through CVE-2008-0904?

CVE-2008-0904 allows attackers to read arbitrary files on the server, which can lead to sensitive information disclosure.

Vulnerability/
CVE-2008-0904

high

7.8

CWE

200

22/2/2008

7/8/2024

CVE-2008-0904: Infoleak

First published: Fri Feb 22 2008(Updated: )

Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1 allows remote attackers to read arbitrary files via a crafted URL.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Bea Systems Plumtree Collaboration	=4.1_sp2
BEA AquaLogic Interaction	=4.2
Bea Systems Plumtree Collaboration	=4.1_sp1
Bea Systems Plumtree Collaboration	=4.1
BEA AquaLogic Interaction	=4.2_mp1

Remedy

http://dev2dev.bea.com/pub/advisory/276

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2008-0904?
CVE-2008-0904 is classified as a medium severity vulnerability due to its potential to allow unauthorized file access.
How do I fix CVE-2008-0904?
To mitigate CVE-2008-0904, it is recommended to upgrade to the latest versions of BEA Plumtree Collaboration and AquaLogic Interaction that contain patches.
Which versions are affected by CVE-2008-0904?
CVE-2008-0904 affects BEA Plumtree Collaboration versions 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1.
Can CVE-2008-0904 be exploited remotely?
Yes, CVE-2008-0904 can be exploited remotely by sending crafted URLs to the vulnerable application.
What type of files can be accessed through CVE-2008-0904?
CVE-2008-0904 allows attackers to read arbitrary files on the server, which can lead to sensitive information disclosure.

agent/type
collector/mitre-cve
source/MITRE
agent/severity
agent/weakness
agent/remedy
agent/references
agent/author
agent/last-modified-date
agent/first-publish-date
agent/event
agent/description
agent/source
agent/softwarecombine
agent/tags
collector/nvd-historical
agent/software-canonical-lookup-request
collector/nvd-index
vendor/bea systems
canonical/bea systems plumtree collaboration
version/bea systems plumtree collaboration/4.1_sp2
canonical/bea aqualogic interaction
version/bea aqualogic interaction/4.2
version/bea systems plumtree collaboration/4.1_sp1
version/bea systems plumtree collaboration/4.1
version/bea aqualogic interaction/4.2_mp1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.