CVE-2004-0711

The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "*" as wildcards as if they were the legal "/*" pattern, which…

published July 21, 2004

CVSS
—
EPSS
2%
Percentile
79.9
In the wild
Unconfirmed
What it is

The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "*" as wildcards as if they were the legal "/*" pattern, which could cause WebLogic 7.x to allow remote attackers to bypass intended access restrictions because the illegal patterns are properly rejected.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01949 · 79.9th percentile
Published
2004-07-21T04:00Z
EPSS history
Timeline
  • 21 JUL 04:00Z
    The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "*" as wildcards as if they were the legal "/*" pattern, which…
    cvelistv5