« Volver al listado

CVE-2007-0434

Estado: ModificadaMedia (4.6)—

BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier for attackers to avoid detection.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

BEA — Aqualogic Enterprise Security

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-0434",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-01-23T02:28:00.000",
  "references": [
    {
      "url": "http://dev2dev.bea.com/pub/advisory/220",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/32860",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/23786",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/22082",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://dev2dev.bea.com/pub/advisory/220",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/32860",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/23786",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/22082",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier for attackers to avoid detection."
    },
    {
      "lang": "es",
      "value": "BEA AquaLogic Enterprise Security 2.0 hasta 2.0 SP2, 2.1 hasta 2.1 SP1, y 2.2 no configura adecuadamente el nivel de seguridad de los eventos de auditoría cuando la carga del sistema es alta, lo cual podría facilitar a los atacantes evitar la detección."
    }
  ],
  "lastModified": "2026-06-16T22:35:33.757",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:bea:aqualogic_enterprise_security:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "39607EDB-12F7-45CA-8077-155DF4664253"
            },
            {
              "criteria": "cpe:2.3:a:bea:aqualogic_enterprise_security:2.0:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "98D2EEE3-A7A3-4DE6-9222-9BEC05154A4F"
            },
            {
              "criteria": "cpe:2.3:a:bea:aqualogic_enterprise_security:2.0:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5BA96F7-55CF-44F9-99BC-6A96B061D028"
            },
            {
              "criteria": "cpe:2.3:a:bea:aqualogic_enterprise_security:2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3528A55-CEEE-474A-8D03-4CC8E18C92A4"
            },
            {
              "criteria": "cpe:2.3:a:bea:aqualogic_enterprise_security:2.1:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "362C3136-A17A-4279-8878-9419F41A2B37"
            },
            {
              "criteria": "cpe:2.3:a:bea:aqualogic_enterprise_security:2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD07BCE0-368F-4019-941E-B97A97FFFE53"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}