// For flags

CVE-2007-0432

 

Severity Score

7.5
*CVSS v2

Exploit Likelihood

< 1%
*EPSS

Affected Versions

3
*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages to a proxy service, which might allow remote attackers to bypass authorization policies and route requests to back-end services or conduct other unauthorized activities.

BEA AquaLogic Service Bus 2.0, 2.1, y 2.5 no rechaza adecuadamente mensajes de petición mal formados a un servicio proxy, lo cual podría permitir a atacantes remotos evitar políticas de autorización y encaminar peticiones a servicios secundarios (back-end services) o llevar a cabo otras actividades no autorizadas.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2007-01-22 CVE Reserved
  • 2007-01-23 CVE Published
  • 2024-08-07 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
References (5)
URL Date SRC
URL Date SRC
Affected Vendors, Products, and Versions (3)