Lucene search
HistoryMar 22, 2006 - 2:02 a.m.
CVE-2006-1358
cve-2006-1358
bea
weblogic portal
vulnerability
unauthorized access
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
High
0.012 Low
EPSS
Percentile
85.6%
Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong session, which might allow one user to see a Portlet of another user.
Affected configurations
Node
oracleweblogic_portalMatch8.1
ORoracleweblogic_portalMatch8.1sp1
ORoracleweblogic_portalMatch8.1sp2
ORoracleweblogic_portalMatch8.1sp3
ORoracleweblogic_portalMatch8.1sp4
ORoracleweblogic_portalMatch8.1sp5
| CPE | Name | Operator | Version |
|---|---|---|---|
| oracle:weblogic_portal | oracle weblogic portal | eq | 8.1 |
Related
nvd
nvd
CVE-2006-1358
2006-03-22 02:02:00
cvelist
cvelist
CVE-2006-1358
2006-03-22 02:00:00
prion
prion
Code injection
2006-03-22 02:02:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
High
0.012 Low
EPSS
Percentile
85.6%
Related for CVE-2006-1358