Vulnerability in Bea Weblogic Server

CVE-2002-2177

BEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause BEA to send the same response for two different HTTP requests, which could allow remote attackers to obtain sensitive information that was intended for other users.

EPSS: 0.012 (65.9th percentile) — read the EPSS interpretation.

Affected products

Bea Weblogic_server — versions 6.1, 7.0, 7.0.0.1
N/a — versions n/a

References

cve@mitre.org (vendor-advisory, x_refsource_BEA)
cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)