Unscored CVE-2008-0864 EUVD-2008-0871GHSA-78g2-xjfj-jhp5

Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page…

Published Feb 21, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definition label, which might allow remote attackers to bypass intended access restrictions.

References

ADV-2008-0613 vdb-entry
29041 third-party-advisory
1019454 vdb-entry
BEA08-183.00 vendor-advisory