CVE-2008-0864 | BDVDB-2026-29362 Detail

Description#

Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definition label, which might allow remote attackers to bypass intended access restrictions.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vupen.com/english/advisories/2008/0613
http://secunia.com/advisories/29041
http://www.securitytracker.com/id?1019454
http://dev2dev.bea.com/pub/advisory/256

Exploit#

No public exploit known

History#

Version 12008-02-21Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.