CVE-2004-0471 | BDVDB-2026-6418 Detail

Description#

BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce site restrictions for starting and stopping servers for users in the Admin and Operator security roles, which allows unauthorized users to cause a denial of service (service shutdown).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securitytracker.com/id?1010129
http://www.securityfocus.com/bid/10327
http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_60.00.jsp
http://www.osvdb.org/6077
https://exchange.xforce.ibmcloud.com/vulnerabilities/16121
http://secunia.com/advisories/11594

Exploit#

No public exploit known

History#

Version 12004-05-20Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.