medium6.4
CVE-2008-0895
BEA WebLogic Server and WebLogic Express 6.1 through 10.0 allows remote attackers to bypass authentication for application servlets via crafted request headers.
Impact
BEA WebLogic Server and WebLogic Express 6.1 through 10.0 allows remote attackers to bypass authentication for application servlets via crafted request headers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bea | Weblogic Server | Versions 6.1, 7.0, 8.1, 9.0, 9.1, 9.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://dev2dev.bea.com/pub/advisory/265
- http://secunia.com/advisories/29041
- http://www.securitytracker.com/id?1019443
- http://www.vupen.com/english/advisories/2008/0612/references
- http://dev2dev.bea.com/pub/advisory/265
- http://secunia.com/advisories/29041
- http://www.securitytracker.com/id?1019443
- http://www.vupen.com/english/advisories/2008/0612/references