CVE-2005-4759

Published: Dec 31, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

BEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system platforms, do not warn the administrative user about platform differences in URLResource case sensitivity, which might cause local users to inadvertently lose protection of Web Application pages.

Affected (4)

Products: Bea: Weblogic Server

1 product

Weblogic Server

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Bea Weblogic Server	Version 7.0
Bea Weblogic Server	Version 7.0
Bea Weblogic Server	Version 8.1
Bea Weblogic Server	Version 8.1

References (6)

http://dev2dev.bea.com/pub/advisory/149

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/17138

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/15052

Source: cve@mitre.org

http://dev2dev.bea.com/pub/advisory/149

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/17138

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/15052

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.