CVE-2008-0897

Unspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated users without "receive" permissions to bypass intended access restrictions and receive messages from a standalone JMS Topic or secured Distributed Topic member destination, related to durable subscriptions.

Published: Feb 22, 2008
Updated: Apr 13, 2023
CVE: CVE-2008-0897
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.9
AV:N/AC:M/Au:S/C:C/I:C/A:N

CWEs:

CWE-264

Affected Software
References

Software	From	Fixed in
bea / weblogic_server	9.0	9.0.x
bea / weblogic_server	9.2	9.2.x
bea / weblogic_server	9.1	9.1.x
bea / weblogic_server	10.0	10.0.x
bea / weblogic_server	9.2-mp1	9.2-mp1.x

http://dev2dev.bea.com/pub/advisory/267
http://secunia.com/advisories/29041
http://www.securitytracker.com/id?1019444
http://www.vupen.com/english/advisories/2008/0612/references

Vulnerability Database

CVE-2008-0897