Vulnerability CVE-2003-1290 - CERT Civis.Net

Vulnerability Name:

CVE-2003-1290 (CCN-13752)

Assigned:

2003-11-13

Published:

2003-11-13

Updated:

2017-07-20

Summary:

BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup enabled, allows remote attackers to obtain configuration information by accessing MBeanHome via the Java Naming and Directory Interface (JNDI).

CVSS v3 Severity:

4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): None Availibility (A): None

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Obtain Information

References:

Source: MITRE
Type: CNA
CVE-2003-1290

Source: CCN
Type: BEA Systems, Inc. Security Advisory (BEA03-43.00)
Workaround available to prevent Mbean exposure

Source: BEA
Type: Vendor Advisory
BEA03-43.00

Source: CCN
Type: SA10218
BEA WebLogic Multiple Vulnerabilities

Source: SECUNIA
Type: Patch, Vendor Advisory
10218

Source: CCN
Type: SA18396
BEA WebLogic MBean Exposure of Configuration Information

Source: SECUNIA
Type: Vendor Advisory
18396

Source: OSVDB
Type: UNKNOWN
3064

Source: CCN
Type: OSVDB ID: 3064
BEA WebLogic MBeanHome Config Information Disclosure

Source: BID
Type: UNKNOWN
16215

Source: CCN
Type: BID-16215
BEA WebLogic Server and WebLogic Express MBean Remote Information Disclosure Vulnerability

Source: BID
Type: Patch
9034

Source: CCN
Type: BID-9034
Multiple BEA WebLogic Server/Express Denial of Service and Information Disclosure Vulnerabilities

Source: XF
Type: UNKNOWN
weblogic-mbeanhome-obtain-information(13752)

Source: XF
Type: UNKNOWN
weblogic-mbeanhome-obtain-information(13752)

Vulnerable Configuration:

Configuration 1:

cpe:/a:bea:weblogic_server:6.0:*:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:6.0:sp1:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:6.0:sp1:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:6.0:sp2:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:6.0:sp2:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:6.1:sp3:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0.0.1:*:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0.0.1:sp1:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0.0.1:sp1:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0.0.1:sp2:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0.0.1:sp2:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0.0.1:sp3:*:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0.0.1:sp3:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0.0.1:sp4:*:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:7.0.0.1:sp4:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:8.1:*:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*

OR cpe:/a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*

Denotes that component is vulnerable