CVE Vulnerability

CVE-2007-0432

BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages to a proxy service, which might allow remote attackers to bypass authorization policies and route requests to back-end services or conduct other unauthorized activities.

7.5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References
Link Resource
http://dev2dev.bea.com/pub/advisory/224 Vendor Advisory
http://securitytracker.com/id?1017523 Vendor Advisory
http://secunia.com/advisories/23786 Vendor Advisory
http://www.securityfocus.com/bid/22082
http://osvdb.org/32862
Configurations

Configuration 1

cpe:2.3:a:bea:aqualogic_service_bus:2.0:*:*:*:*:*:*:*
cpe:2.3:a:bea:aqualogic_service_bus:2.1:*:*:*:*:*:*:*
cpe:2.3:a:bea:aqualogic_service_bus:2.5:*:*:*:*:*:*:*
Information

Published : 2007-01-23 02:28

Updated : 2008-11-13 06:31

NVD link : CVE-2007-0432

Mitre link : CVE-2007-0432

Products Affected
No products.
CWE
NVD-CWE-Other