ID de Prueba:	1.3.6.1.4.1.25623.1.0.55678
Categoría:	CGI abuses
Título:	WebLogic Server Group Deletion Permission Leakage
Resumen:	NOSUMMARY
Descripción:	Description: CVE-2005-0715: The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 does not properly clear member relationships when a group is deleted, which can cause a new group with the same name to have the members of the old group, which allows group members to gain privileges. Solution : Apply the latest service pack. For 8.1, apply SP3 For 7.0, apply SP5 http://dev2dev.bea.com/pub/advisory/15 Risk factor : High CVSS Score: 5.1
Referencia Cruzada:	BugTraq ID: 10130 Common Vulnerability Exposure (CVE) ID: CVE-2004-0715 http://www.securityfocus.com/bid/10130 CERT/CC vulnerability note: VU#470470 http://www.kb.cert.org/vuls/id/470470 http://www.osvdb.org/5299 http://securitytracker.com/id?1009763 http://secunia.com/advisories/11356 XForce ISS Database: weblogic-authentication-gain-privileges(15861) https://exchange.xforce.ibmcloud.com/vulnerabilities/15861
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.