CVE-2005-1744 | BDVDB-2026-10422 Detail

Description#

BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the application without having to log in again, which may be in violation of newly changed security constraints or role mappings.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vupen.com/english/advisories/2005/0604
http://secunia.com/advisories/15486
http://dev2dev.bea.com/pub/advisory/127
http://securitytracker.com/id?1014049
http://www.securityfocus.com/bid/13717

Exploit#

No public exploit known

History#

Version 12005-05-24Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.