CVE-2007-4614

BEA WebLogic Server 9.1 does not properly handle propagation of an admin server's security policy change log to temporarily unavailable managed servers, which might allow attackers to bypass intended restrictions, a different vulnerability than CVE-2007-0426.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2007-08-31

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Weblogic Server (Bea)

References

• http://dev2dev.bea.com/pub/advisory/216
• http://osvdb.org/45839
• http://www.securityfocus.com/bid/22082