CVEvulnerability

CVE-2003-0621

5.0 MEDIUM Published 2003-12-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-12-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument.

Affected configurations

• bea tuxedo 6.3 • bea tuxedo 6.4 • bea tuxedo 6.5 • bea tuxedo 7.1 • bea tuxedo 8.0 • bea tuxedo 8.1 • bea weblogic server 4.2 • bea weblogic server 5.0.1 • bea weblogic server 5.1

References