BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation (RMI) over Internet Inter-ORB Protocol (IIOP), does not properly handle when multiple logins for different users coming from the same client, which could cause an "unexpected user identity" to be used in an RMI call.
| Version | Base score | Base severity | Vector |
|---|
| Hyperlink | Resource Type |
|---|
BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation (RMI) over Internet Inter-ORB Protocol (IIOP), does not properly handle when multiple logins for different users coming from the same client, which could cause an "unexpected user identity" to be used in an RMI call.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://secunia.com/advisories/11865 | third-party-advisory x_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/16421 | vdb-entry x_refsource_XF |
| http://securitytracker.com/id?1010493 | vdb-entry x_refsource_SECTRACK |
| http://www.securityfocus.com/bid/10545 | vdb-entry x_refsource_BID |
| http://dev2dev.bea.com/pub/advisory/59 | vendor-advisory x_refsource_BEA |
| http://www.osvdb.org/7081 | vdb-entry x_refsource_OSVDB |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://secunia.com/advisories/11865 | third-party-advisory x_refsource_SECUNIA x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/16421 | vdb-entry x_refsource_XF x_transferred |
| http://securitytracker.com/id?1010493 | vdb-entry x_refsource_SECTRACK x_transferred |
| http://www.securityfocus.com/bid/10545 | vdb-entry x_refsource_BID x_transferred |
| http://dev2dev.bea.com/pub/advisory/59 | vendor-advisory x_refsource_BEA x_transferred |
| http://www.osvdb.org/7081 | vdb-entry x_refsource_OSVDB x_transferred |
BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation (RMI) over Internet Inter-ORB Protocol (IIOP), does not properly handle when multiple logins for different users coming from the same client, which could cause an "unexpected user identity" to be used in an RMI call.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 5.5 | MEDIUM | AV:N/AC:L/Au:S/C:P/I:P/A:N |
| Hyperlink | Source | Resource |
|---|---|---|
| http://dev2dev.bea.com/pub/advisory/59 | cve@mitre.org | N/A |
| http://secunia.com/advisories/11865 | cve@mitre.org | Vendor Advisory |
| http://securitytracker.com/id?1010493 | cve@mitre.org | N/A |
| http://www.osvdb.org/7081 | cve@mitre.org | N/A |
| http://www.securityfocus.com/bid/10545 | cve@mitre.org | N/A |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/16421 | cve@mitre.org | N/A |
| http://dev2dev.bea.com/pub/advisory/59 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://secunia.com/advisories/11865 | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |
| http://securitytracker.com/id?1010493 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www.osvdb.org/7081 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www.securityfocus.com/bid/10545 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/16421 | af854a3a-2127-422b-91ae-364da2661108 | N/A |