CVE-2004-0715 Auth bypass in n/a
Improper cleanup of group members allows new groups to inherit old members, enabling privilege escalation for authenticated users.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2004-0715?
CVE-2004-0715 is a medium-severity authentication bypass vulnerability in Bea Weblogic Server, published on 21 Jul 2004. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 does not properly clear member relationships when a group is deleted, which can cause a new group with the same name to have the members of the old group, which allows group members to gain privileges.
Which versions are affected by CVE-2004-0715?
It affects 1 product.
Products include Bea Weblogic Server.
How do I fix CVE-2004-0715?
No fix has been published for CVE-2004-0715 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2004-0715 being exploited?
There is no known exploitation of CVE-2004-0715 in the wild and no public exploit code.
Other vulnerabilities in Bea Weblogic Server
- CVE-2008-3257 Memory corruption in n/a
- CVE-2007-0417 BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm, allows a
- CVE-2003-0640 Privilege escalation in n/a
- CVE-2001-0098 Path traversal in n/a
- CVE-2000-0681 Memory corruption in n/a
Sources
Also known as GHSA-m585-h5rv-5jf5.