CVE-2007-0434
Summary
| CVE | CVE-2007-0434 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2007-01-23 02:28:00 UTC |
| Updated | 2008-11-13 06:31:00 UTC |
| Description | BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier for attackers to avoid detection. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Bea | Aqualogic Enterprise Security | 2.0 | All | All | All |
| Application | Bea | Aqualogic Enterprise Security | 2.0 | sp1 | All | All |
| Application | Bea | Aqualogic Enterprise Security | 2.0 | sp2 | All | All |
| Application | Bea | Aqualogic Enterprise Security | 2.1 | All | All | All |
| Application | Bea | Aqualogic Enterprise Security | 2.1 | sp1 | All | All |
| Application | Bea | Aqualogic Enterprise Security | 2.2 | All | All | All |
| Application | Bea | Aqualogic Enterprise Security | 2.0 | All | All | All |
| Application | Bea | Aqualogic Enterprise Security | 2.0 | sp1 | All | All |
| Application | Bea | Aqualogic Enterprise Security | 2.0 | sp2 | All | All |
| Application | Bea | Aqualogic Enterprise Security | 2.1 | All | All | All |
| Application | Bea | Aqualogic Enterprise Security | 2.1 | sp1 | All | All |
| Application | Bea | Aqualogic Enterprise Security | 2.2 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| BEA Multiple Products Multiple Vulnerabilities | BID | www.securityfocus.com | |
| Audit events may be posted with incorrect severity. | BEA | dev2dev.bea.com | Vendor Advisory |
| 32860 | OSVDB | osvdb.org | |
| BEA AquaLogic Weakness and Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | SECUNIA | secunia.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.