Session fixation

2008-02-2221:44:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.4%

JSON

Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.

CPENameOperatorVersion
weblogic_servereq9.2
weblogic_servereq8.1 sp6-express
weblogic_servereq8.1 sp5-express
weblogic_servereq8.1 sp5
weblogic_servereq8.1 sp4-express
weblogic_servereq10.0
weblogic_servereq9.2 mp1
weblogic_servereq8.1 sp6
weblogic_servereq8.1 sp4
weblogic_expresseq10.0

Name	Operator	Version
weblogic_server	eq	9.2
weblogic_server	eq	8.1 sp6-express
weblogic_server	eq	8.1 sp5-express
weblogic_server	eq	8.1 sp5
weblogic_server	eq	8.1 sp4-express
weblogic_server	eq	10.0
weblogic_server	eq	9.2 mp1
weblogic_server	eq	8.1 sp6
weblogic_server	eq	8.1 sp4
weblogic_express	eq	10.0

Rows per page:

1-10 of 111

References

dev2dev.bea.com/pub/advisory/270

secunia.com/advisories/29041

www.securitytracker.com/id?1019439

www.vupen.com/english/advisories/2008/0612/references