CVE-2005-1744 — Incomplete Cleanup in Weblogic Server

CWE-459 — Incomplete Cleanup3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
0.7%
top 27.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
BEA Weblogic Server
Timeline
PublishedMay 24
Latest updateMay 1

Description

BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the application without having to log in again, which may be in violation of newly changed security constraints or role mappings.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-r9vw-px66-gx7g: BEA WebLogic Server and WebLogic Express 7↗2022-05-01
▶
CVEList
CVE-2005-1744: BEA WebLogic Server and WebLogic Express 7↗2005-05-24
▶
CVE-2005-1744 — Incomplete Cleanup in Weblogic Server | cvebase