medium6.0
CVE-2008-0900
Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack we…
Impact
Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bea | Weblogic Server | Versions 8.1, 9.2, 10.0 |
| Bea Systems | Weblogic Express | Versions 9.2, 10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://dev2dev.bea.com/pub/advisory/270
- http://secunia.com/advisories/29041
- http://www.securitytracker.com/id?1019439
- http://www.vupen.com/english/advisories/2008/0612/references
- http://dev2dev.bea.com/pub/advisory/270
- http://secunia.com/advisories/29041
- http://www.securitytracker.com/id?1019439
- http://www.vupen.com/english/advisories/2008/0612/references