CVE Daily

CVE-2008-0900

Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 throug...

Medium CVSS 6.0

Overview

Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.

CWE: CWE-264 Published: 2008-02-22T21:44:00.000
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.0 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags