high7.9
CVE-2008-0897
Unspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated users without "receive" permissions to bypass intended access res…
Impact
Unspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated users without "receive" permissions to bypass intended access restrictions and receive messages from a standalone JMS Topic or secured Distributed Topic member destination, related to durable subscriptions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bea | Weblogic Server | Versions 9.0, 9.1, 9.2, 10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://dev2dev.bea.com/pub/advisory/267
- http://secunia.com/advisories/29041
- http://www.securitytracker.com/id?1019444
- http://www.vupen.com/english/advisories/2008/0612/references
- http://dev2dev.bea.com/pub/advisory/267
- http://secunia.com/advisories/29041
- http://www.securitytracker.com/id?1019444
- http://www.vupen.com/english/advisories/2008/0612/references