CVE-2008-0904

Published: Feb 22, 2008Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1 allows remote attackers to read arbitrary files via a crafted URL.

Affected (5)

Products: Bea Systems: Aqualogic Interaction, Plumtree Collaboration

2 products

Aqualogic Interaction

Plumtree Collaboration

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Bea Systems Aqualogic Interaction	Version 4.2
Bea Systems Aqualogic Interaction	Version 4.2_mp1
Bea Systems Plumtree Collaboration	Version 4.1
Bea Systems Plumtree Collaboration	Version 4.1_sp1
Bea Systems Plumtree Collaboration	Version 4.1_sp2

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (10)

http://dev2dev.bea.com/pub/advisory/276

Source: cve@mitre.org

Patch

http://osvdb.org/41881

Source: cve@mitre.org

http://secunia.com/advisories/28991

Source: cve@mitre.org

http://www.securitytracker.com/id?1019437

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0607/references

Source: cve@mitre.org

http://dev2dev.bea.com/pub/advisory/276

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://osvdb.org/41881

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28991

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1019437

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0607/references

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.