Signature Detail
Short Name |
HTTP:XSS:BEA-ADMIN-CONSOLE |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
WebLogic Admin Console Cross-Site Scripting |
Release Date |
2006/02/24 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: WebLogic Admin Console Cross-Site Scripting
This signature detects a cross-site scripting attack against the Admin Console portion of BEA WebLogic products. By persuading a WebLogic administrator to follow specially crafted Admin Console links, an attacker can inject arbitrary HTML content into pages returned by the WebLogic server. Successful exploitation can disclose privileged WebLogic server credentials to the attacker.
Extended Description
BEA WebLogic Server And WebLogic Express are affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'LoginForm.jsp' script. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. This issue was originally released as part of BID 13717 (BEA WebLogic Server and WebLogic Express Multiple Remote Vulnerabilities). Due to the availability of more information, this vulnerability is being assigned a new BID.
Affected Products
- BEA Systems WebLogic Express 7.0.0
- BEA Systems WebLogic Express 7.0.0 SP 1
- BEA Systems WebLogic Express 7.0.0 SP 2
- BEA Systems WebLogic Express 7.0.0 SP 3
- BEA Systems WebLogic Express 7.0.0 SP 4
- BEA Systems WebLogic Express 7.0.0 SP 5
- BEA Systems WebLogic Express 7.0.0 SP 6
- BEA Systems WebLogic Express 8.1.0
- BEA Systems WebLogic Express 8.1.0 SP 1
- BEA Systems WebLogic Express 8.1.0 SP 2
- BEA Systems WebLogic Express 8.1.0 SP 3
- BEA Systems WebLogic Express 8.1.0 SP 4
- BEA Systems WebLogic Express for Win32 7.0.0
- BEA Systems WebLogic Express for Win32 7.0.0 SP 1
- BEA Systems WebLogic Express for Win32 7.0.0 SP 2
- BEA Systems WebLogic Express for Win32 7.0.0 SP 3
- BEA Systems WebLogic Express for Win32 7.0.0 SP 4
- BEA Systems WebLogic Express for Win32 7.0.0 SP 5
- BEA Systems WebLogic Express for Win32 7.0.0 SP 6
- BEA Systems WebLogic Express for Win32 8.1.0
- BEA Systems WebLogic Express for Win32 8.1.0 SP 1
- BEA Systems WebLogic Express for Win32 8.1.0 SP 2
- BEA Systems WebLogic Express for Win32 8.1.0 SP 3
- BEA Systems WebLogic Express for Win32 8.1.0 SP 4
- BEA Systems Weblogic Server 7.0.0
- BEA Systems Weblogic Server 7.0.0 SP 1
- BEA Systems Weblogic Server 7.0.0 SP 2
- BEA Systems Weblogic Server 7.0.0 SP 3
- BEA Systems Weblogic Server 7.0.0 SP 4
- BEA Systems Weblogic Server 7.0.0 SP 5
- BEA Systems Weblogic Server 7.0.0 SP 6
- BEA Systems Weblogic Server 8.1.0
- BEA Systems Weblogic Server 8.1.0 SP 1
- BEA Systems Weblogic Server 8.1.0 SP 2
- BEA Systems Weblogic Server 8.1.0 SP 3
- BEA Systems Weblogic Server 8.1.0 SP 4
- BEA Systems WebLogic Server for Win32 7.0.0
- BEA Systems WebLogic Server for Win32 7.0.0 SP 1
- BEA Systems WebLogic Server for Win32 7.0.0 SP 2
- BEA Systems WebLogic Server for Win32 7.0.0 SP 3
- BEA Systems WebLogic Server for Win32 7.0.0 SP 4
- BEA Systems WebLogic Server for Win32 7.0.0 SP 5
- BEA Systems WebLogic Server for Win32 7.0.0 SP 6
- BEA Systems WebLogic Server for Win32 8.1.0
- BEA Systems WebLogic Server for Win32 8.1.0 SP 1
- BEA Systems WebLogic Server for Win32 8.1.0 SP 2
- BEA Systems WebLogic Server for Win32 8.1.0 SP 3
- BEA Systems WebLogic Server for Win32 8.1.0 SP 4
References
- BugTraq: 13793
- CVE: CVE-2005-1747
- URL: http://www.frsirt.com/english/advisories/2005/0607