389 matches found
Design/Logic Flaw
BEA WebLogic Portal 9.2, when running in a WebLogic Server clustered environment using WebLogic Portal entitlements, does not properly propagate entitlement policy changes if the changes are made on a managed server while the Administrative Server is unavailable, which might allow attackers to...
CVE-2007-0423
BEA WebLogic Portal 9.2 does not properly handle when an administrator deletes entitlements for a role, which causes other role entitlements to be "inadvertently affected," which has an unknown impact...
CVE-2007-0423
BEA WebLogic Portal 9.2 does not properly handle when an administrator deletes entitlements for a role, which causes other role entitlements to be "inadvertently affected," which has an unknown impact...
CVE-2007-0423: Undefined Security Weakness
BEA WebLogic Portal 9.2 does not properly handle when an administrator deletes entitlements for a role, which causes other role entitlements to be "inadvertently affected," which has an unknown impact...
CVE-2007-0426
BEA WebLogic Portal 9.2 in a WebLogic Server clustered environment has a vulnerability where entitlement policy changes made on a managed server while the Administrative Server is unavailable may not propagate correctly, potentially allowing bypass of intended restrictions. The issue affects the ...
CVE-2007-0423
CVE-2007-0423 affects BEA WebLogic Portal 9.2. The issue arises when an administrator deletes entitlements for a role, which reportedly causes other entitlements to be inadvertently affected; the impact is described as unknown. No concrete root cause, vulnerability vector, exploit details, or rem...
CVE-2007-0426
BEA WebLogic Portal 9.2, when running in a WebLogic Server clustered environment using WebLogic Portal entitlements, does not properly propagate entitlement policy changes if the changes are made on a managed server while the Administrative Server is unavailable, which might allow attackers to...
CVE-2005-2680
The CVE-2005-2680 entry concerns BEA WebLogic Portal 8.1 through SP4. The vulnerability occurs when using entitlements and allows remote attackers to bypass access restrictions for pages of a Book via crafted URLs. This is described as an unspecified vulnerability with impact limited to bypassing...