CVE-2008-0900
Published Feb 22, 2008
Last updated 14 years ago
Overview
- Description
- Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6
- Impact score
- 6.4
- Exploitability score
- 6.8
- Vector string
- AV:N/AC:M/Au:S/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-264
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0653ACAC-B0D9-4381-AB23-11D24852A414"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A489A8E-D3AE-42DF-8DCF-5A9EF10778FA"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:sp5:express:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24E0BA12-971C-4DC4-8ED2-9B7DCD6390E7"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:sp6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A75A7F9-A99A-4C8E-9867-71FA8A55DD70"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:sp6:express:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "715D1DD4-A736-4F55-9369-71C232AB14CC"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BA8C449-ECD0-46E5-A7D6-740DE8DEE0EC"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:9.2:mp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "321BC193-5FBF-4F25-996D-1FE74779F34D"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60F9ABCC-5217-4650-8C71-F8B0EB86789F"
},
{
"criteria": "cpe:2.3:a:bea_systems:weblogic_express:9.2:mp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF045092-39D3-4598-99DA-D1B35F0DDC3C"
},
{
"criteria": "cpe:2.3:a:bea_systems:weblogic_express:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61231482-5CC5-4C23-AA48-11E24FB6C94F"
}
],
"operator": "OR"
}
]
}
]