Description
BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier for attackers to avoid detection.
Metrics
CVSS 2.0 4.6/10
AV:L/AC:L/Au:N/C:P/I:P/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://dev2dev.bea.com/pub/advisory/220Vendor Advisory
- http://osvdb.org/32860
- http://secunia.com/advisories/23786Vendor Advisory
- http://www.securityfocus.com/bid/22082
- http://dev2dev.bea.com/pub/advisory/220Vendor Advisory
- http://osvdb.org/32860
- http://secunia.com/advisories/23786Vendor Advisory
- http://www.securityfocus.com/bid/22082
Timeline
- Published
- Jan 23, 2007
- Last modified
- Jun 16, 2026
- NVD status
- Modified