CVEvulnerability
CVE-2008-0900
6.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-02-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.
Affected configurations
• bea weblogic server 8.1
• bea weblogic server 9.2
• bea weblogic server 10.0
• bea systems weblogic express 9.2
• bea systems weblogic express 10.0
Related
Weakness · not in database (1)
References
- http://dev2dev.bea.com/pub/advisory/270 Patch
- http://secunia.com/advisories/29041 secunia.com
- http://www.securitytracker.com/id?1019439 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0612/references www.vupen.com
- http://dev2dev.bea.com/pub/advisory/270 Patch
- http://secunia.com/advisories/29041 secunia.com
- http://www.securitytracker.com/id?1019439 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0612/references www.vupen.com