VULNERABILITY INTELLIGENCE
CVE-2001-1477
CVSS score4.6 MEDIUM
EPSS probability0.32%
CISA KEVNot currently listed
Published2001-12-31
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P
Description
The Domain gateway in BEA Tuxedo 7.1 does not perform authorization checks for imported services and qspaces on remote domains, even when an ACL exists, which allows users to access services in a remote domain.