CVE-2003-0640

UNKNOWN

BEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users with privileges to overwrite usernames and passwords, which may allow Operators to gain Admin privileges

Published Aug 2, 2003

Modified 1 years ago

Details

BEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users with privileges to overwrite usernames and passwords, which may allow Operators to gain Admin privileges.

References

WEB

http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-33.jsp

ADVISORY

http://www.secunia.com/advisories/9232/

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2003-0640

CVSS Analysis

CVSS v2.0

10.0

Exploitability

Access Vector