CVEvulnerability
CVE-2004-2696
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:N
- Weaknesses
- CWE-255
Description
BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation (RMI) over Internet Inter-ORB Protocol (IIOP), does not properly handle when multiple logins for different users coming from the same client, which could cause an "unexpected user identity" to be used in an RMI call.
Affected configurations
• bea weblogic server 6.1
• bea weblogic server 7.0
• bea weblogic server 7.0.0.1
• bea weblogic server 8.1
Related
Weakness · not in database (1)
References
- http://dev2dev.bea.com/pub/advisory/59 dev2dev.bea.com
- http://secunia.com/advisories/11865 Vendor Advisory
- http://securitytracker.com/id?1010493 securitytracker.com
- http://www.osvdb.org/7081 www.osvdb.org
- http://www.securityfocus.com/bid/10545 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16421 exchange.xforce.ibmcloud.com
- http://dev2dev.bea.com/pub/advisory/59 dev2dev.bea.com
- http://secunia.com/advisories/11865 Vendor Advisory
- http://securitytracker.com/id?1010493 securitytracker.com
- http://www.osvdb.org/7081 www.osvdb.org
- http://www.securityfocus.com/bid/10545 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16421 exchange.xforce.ibmcloud.com