CVE-2007-0434

{"id": "CVE-2007-0434", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2007-01-23T02:28:00.000", "references": [{"url": "http://dev2dev.bea.com/pub/advisory/220", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://osvdb.org/32860", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/23786", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/22082", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier for attackers to avoid detection."}, {"lang": "es", "value": "BEA AquaLogic Enterprise Security 2.0 hasta 2.0 SP2, 2.1 hasta 2.1 SP1, y 2.2 no configura adecuadamente el nivel de seguridad de los eventos de auditor\u00eda cuando la carga del sistema es alta, lo cual podr\u00eda facilitar a los atacantes evitar la detecci\u00f3n."}], "lastModified": "2008-11-13T06:31:53.860", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bea:aqualogic_enterprise_security:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39607EDB-12F7-45CA-8077-155DF4664253"}, {"criteria": "cpe:2.3:a:bea:aqualogic_enterprise_security:2.0:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "98D2EEE3-A7A3-4DE6-9222-9BEC05154A4F"}, {"criteria": "cpe:2.3:a:bea:aqualogic_enterprise_security:2.0:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5BA96F7-55CF-44F9-99BC-6A96B061D028"}, {"criteria": "cpe:2.3:a:bea:aqualogic_enterprise_security:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F3528A55-CEEE-474A-8D03-4CC8E18C92A4"}, {"criteria": "cpe:2.3:a:bea:aqualogic_enterprise_security:2.1:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "362C3136-A17A-4279-8878-9419F41A2B37"}, {"criteria": "cpe:2.3:a:bea:aqualogic_enterprise_security:2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD07BCE0-368F-4019-941E-B97A97FFFE53"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}