Design/Logic Flaw

2007-01-2300:28:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.5%

JSON

BEA WebLogic Portal 9.2, when running in a WebLogic Server clustered environment using WebLogic Portal entitlements, does not properly propagate entitlement policy changes if the changes are made on a managed server while the Administrative Server is unavailable, which might allow attackers to bypass intended restrictions.

CPENameOperatorVersion
weblogic_portaleq9.2

CPE	Name	Operator	Version
	weblogic_portal	eq	9.2

References

dev2dev.bea.com/pub/advisory/223

osvdb.org/32854

osvdb.org/38516

secunia.com/advisories/23750

securitytracker.com/id?1017521

www.securityfocus.com/bid/22082

www.vupen.com/english/advisories/2007/0213