CVE-2003-0640 BEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users with privileges to overwrite usernames and passwords, which may allow Operators to gain Admin privileg...
HighCVSS 10.0
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
BEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users with privileges to overwrite usernames and passwords, which may allow Operators to gain Admin privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bea weblogic server | All versions | No fix listed |
References
- dev2dev.bea.com
- 9232 patch third-party-advisory vendor-advisory