CVE-2001-1477

Published Dec 31, 2001

Last updated 7 years ago

Overview

Description: The Domain gateway in BEA Tuxedo 7.1 does not perform authorization checks for imported services and qspaces on remote domains, even when an ACL exists, which allows users to access services in a remote domain.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 4.6
Impact score: 6.4
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:bea:tuxedo:7.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EC74F617-4CA9-4B0C-87C7-C49A73934CEE"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References