CVE-2004-1755

CVE-2004-1755

EPSS 1.5%

The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple certificates to connect to the same URL, may use the incorrect identity after the first connection, which could allow users to gain privileges.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_47.00.jsp http://secunia.com/advisories/10725 https://exchange.xforce.ibmcloud.com/vulnerabilities/15826 http://www.kb.cert.org/vuls/id/858990 http://www.securityfocus.com/bid/9502