Beveiligingsadvies

CVE-2004-0470

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2004-05-20 04:00:00

Laatst bijgewerkt 2024-08-08 00:17:14

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2, when editing weblogic.xml using WebLogic Builder or the SecurityRoleAssignmentMBean.toXML method, inadvertently removes security-role-assignment tags when weblogic.xml does not have a principal-name tag, which can remove intended access restrictions for the associated web application.

← Alle CVE's bekijken Bekijk op cve.org ↗