Vulnerability in Bea Weblogic Server

CVE-2007-4614

BEA WebLogic Server 9.1 does not properly handle propagation of an admin server's security policy change log to temporarily unavailable managed servers, which might allow attackers to bypass intended restrictions, a different vulnerability than CVE-2007-0426.

EPSS: 0.012 (64.9th percentile) — read the EPSS interpretation.

Affected products

Bea Weblogic_server — versions 9.1
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (vendor-advisory, x_refsource_BEA, Patch)