PT-2018-18165

Name of the Vulnerable Software and Affected Versions WebLog Expert Web Server Enterprise version 9.4 Description The issue allows for a Remote Denial Of Service, causing the daemon to crash. This can be achieved by sending a long HTTP Accept Header to TCP port 9991. Recommendations For WebLog...

CVE-2018-7582: Allocation of Resources Without Limits or Throttling

WebLog Expert Web Server Enterprise 9.4 allows Remote Denial Of Service daemon crash via a long HTTP Accept Header to TCP port 9991...

CVE-2018-7581: Incorrect Permission Assignment for Critical Resource

\ProgramData\WebLog Expert\WebServer\WebServer.cfg in WebLog Expert Web Server Enterprise 9.4 has weak permissions BUILTIN\Users:IDC, which allows local users to set a cleartext password and login as admin...

PT-2018-18164

Name of the Vulnerable Software and Affected Versions WebLog Expert Web Server Enterprise version 9.4 Description The issue concerns weak permissions in the ProgramDataWebLog ExpertWebServerWebServer.cfg file, allowing local users to set a cleartext password and login as admin. Recommendations Fo...