CVE:CVE-2008-0864
CNNVD:CNNVD-200802-388
BEA WebLogic Portal的管理员工具存在权限许可和访问控制漏洞。BEA WebLogic Portal的管理员工具(Admin Tools)可以不经意地在管理员编辑页定义标签时移动页的权限，这会允许远程攻击者绕过预设的访问权限限制。
solution:Upgrade bea_systems weblogic_portal to a higher version than 8.1_sp6,and avoid the version 8.1_sp6; Upgrade oracle weblogic_portal to a higher version than 8.1:sp3,8.1:sp4,8.1:sp5,and avoid the version 8.1:sp3,8.1:sp4,8.1:sp5