CVE-2004-0711 in WebLogic
Summary
The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "*" as wildcards as if they were the legal "/*" pattern, which could cause WebLogic 7.x to allow remote attackers to bypass intended access restrictions because the illegal patterns are properly rejected.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
07/20/2004
Disclosure
07/27/2004
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 624 | BEA WebLogic URL Filter * privileges management | 269 | Proof-of-Concept | Official fix | CVE-2004-0711 |