VULNERABILITY INTELLIGENCE
CVE-2008-0870
CVSS score7.5 HIGH
EPSS probability1.43%
CISA KEVNot currently listed
Published2008-02-21
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the Portal Administration Console to an http URI, which allows remote attackers to sniff the session.
Weakness classification
- CWE-59: Improper Link Resolution Before File Access ('Link Following')