| Vulnerability Name: | CVE-2005-4759 (CCN-22579) | ||||||||
| Assigned: | 2005-10-12 | ||||||||
| Published: | 2005-10-12 | ||||||||
| Updated: | 2008-09-05 | ||||||||
| Summary: | BEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system platforms, do not warn the administrative user about platform differences in URLResource case sensitivity, which might cause local users to inadvertently lose protection of Web Application pages. | ||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
| ||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Bypass Security | ||||||||
| References: | Source: MITRE Type: CNA CVE-2005-4759 Source: BEA Type: Patch, Vendor Advisory BEA05-95.00 Source: CCN Type: BEA Systems Inc. Web site BEA Product Documentation Source: CCN Type: SA17138 BEA WebLogic 24 Vulnerabilities and Security Issues Source: SECUNIA Type: Vendor Advisory 17138 Source: CCN Type: OSVDB ID: 20102 BEA WebLogic Cross Platform Ruleset Implementation Weakness Source: BID Type: UNKNOWN 15052 Source: CCN Type: BID-15052 BEA WebLogic Server and WebLogic Express Multiple Vulnerabilities Source: XF Type: UNKNOWN weblogic-security-policy-import(22579) Source: CCN Type: BEA Systems Security Advisory: (BEA05-95.00) Exporting security policies from one operating system and importing to another operating system can lead to servlets being unprotected. | ||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||
| BACK | |||||||||