Unscored CVE-2006-1358 EUVD-2006-1362GHSA-gxxr-jv9h-5q3v

Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong sessio…

Published Mar 22, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong session, which might allow one user to see a Portlet of another user.

References

ADV-2006-1022 vdb-entry
BEA06-122.00 vendor-advisory
19308 third-party-advisory
17164 vdb-entry
1015791 vdb-entry
weblogic-portal-portlet-disclosure(25345) vdb-entry