CVE-2004-1755

Impact

The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple certificates to connect to the same URL, may use the incorrect identity after the first connection, which could allow users to gain privileges.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

References

• NVD record
• CVE.org record
• http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_47.00.jsp
• http://secunia.com/advisories/10725
• http://www.kb.cert.org/vuls/id/858990
• http://www.securityfocus.com/bid/9502
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15826
• http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_47.00.jsp
• http://secunia.com/advisories/10725
• http://www.kb.cert.org/vuls/id/858990
• http://www.securityfocus.com/bid/9502
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15826