CVE-2005-4752
BEA WebLogic Server & WebLogic Express <8.1 SP4 - Privilege Escalation
Title source: llmDescription
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP6 and earlier, might allow local users to gain privileges by using the run-as deployment descriptor element to change the privileges of a web application or EJB from the Deployer security role to the Admin security role.
References (3)
Core 3
Core References
Third Party Advisory, Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/15052
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/17138
Patch, Vendor Advisory vendor-advisory
x_refsource_bea
http://dev2dev.bea.com/pub/advisory/142
Scores
EPSS
0.0008
EPSS Percentile
22.6%
Details
Status
published
Products (2)
bea/weblogic_server
7.0 (14 CPE variants)
bea/weblogic_server
8.1 (10 CPE variants)
Published
Dec 31, 2005
Tracked Since
Feb 18, 2026