CVE-2008-0897 Unspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated users without "receive" permissions to bypass intended access restrictions and receive messages from a sta...
HighCVSS 7.9
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated users without "receive" permissions to bypass intended access restrictions and receive messages from a standalone JMS Topic or secured Distributed Topic member destination, related to durable subscriptions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bea weblogic server | = 9.0 | No fix listed |
| bea weblogic server | = 9.1 | No fix listed |
| bea weblogic server | = 9.2 | No fix listed |
| bea weblogic server | = 9.2-mp1 | No fix listed |
| bea weblogic server | = 10.0 | No fix listed |
References
- BEA08-193.00 patch vendor-advisory
- 29041 third-party-advisory
- 1019444 vdb-entry
- ADV-2008-0612 vdb-entry