CVEvulnerability

CVE-2001-1477

4.6 MEDIUM Published 2001-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

The Domain gateway in BEA Tuxedo 7.1 does not perform authorization checks for imported services and qspaces on remote domains, even when an ACL exists, which allows users to access services in a remote domain.

Affected configurations

• bea tuxedo 7.1

References