CVEvulnerability

CVE-2003-0640

10.0 HIGH Published 2003-08-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-08-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

BEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users with privileges to overwrite usernames and passwords, which may allow Operators to gain Admin privileges.

Affected configurations

• bea weblogic server

Related

Referenced by CWE · observed example (1)

  • CWE-268 Privilege Chaining weakness

References