Vulnerabilities > CVE-2004-2696 - Credentials Management vulnerability in BEA Weblogic Server

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
bea
CWE-255
NVD
Published: 2004-12-31
Updated: 2024-11-20

Summary

BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation (RMI) over Internet Inter-ORB Protocol (IIOP), does not properly handle when multiple logins for different users coming from the same client, which could cause an "unexpected user identity" to be used in an RMI call.

Vulnerable Configurations

Part Description Count
Application
Bea
61

Common Weakness Enumeration (CWE)

References