CVE-2000-1238
BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL with multiple / (forward slash) characters before the restricted pages.
- Score
- CVSS 2.0 7.5 High
- Status
- Modified - cve@mitre.org
- Published
- 2000-12-31
- Last modified
- 2024-08-08
Affected products
References
- http://www.securityfocus.com/bid/5089
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5588
