CVE-2006-1358 in WebLogic
Summary
Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong session, which might allow one user to see a Portlet of another user.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
03/21/2006
Disclosure
03/21/2006
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 2097 | BEA WebLogic JSR-168 Portlet Cache information disclosure | 200 | Proof-of-Concept | Official fix | CVE-2006-1358 |