CVE-2004-0713 in WebLogic
Summary
The remove method in a stateful Enterprise JavaBean (EJB) in BEA WebLogic Server and WebLogic Express version 8.1 through SP2, 7.0 through SP4, and 6.1 through SP6, does not properly check EJB permissions before unexporting a bean, which allows remote authenticated users to remove EJB objects from remote views before the security exception is thrown.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
07/20/2004
Disclosure
07/27/2004
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 623 | BEA WebLogic EJB Object privileges management | 269 | Not defined | Official fix | CVE-2004-0713 |