CVE-2003-1095 | BDVDB-2026-8788 Detail

Description#

BEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web applications, does not clear authentication information when a web application is redeployed, which could allow users of that application to gain access without having to re-authenticate.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-27.jsp
http://www.securityfocus.com/bid/7130
http://www.kb.cert.org/vuls/id/691153
https://exchange.xforce.ibmcloud.com/vulnerabilities/11555

Exploit#

No public exploit known

History#

Version 12005-03-10Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.