Unscored CVE-2008-0900 EUVD-2008-0907GHSA-fx8p-9q3f-f3m3

Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticate…

Published Feb 22, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.

References

1019439 vdb-entry
BEA08-196.00 vendor-advisory
29041 third-party-advisory
ADV-2008-0612 vdb-entry