Description
BEA WebLogic Server and WebLogic Express 9.0 causes new security providers to appear active even if they have not been activated by a server reboot, which could cause an administrator to perform inappropriate, security-relevant actions.
References
- ADV-2006-0313 vdb-entry
- 22773 vdb-entry
- weblogic-security-provider-weakness(24298) vdb-entry
- 1015528 vdb-entry
- 18592 third-party-advisory
- BEA06-116.00 vendor-advisory
- 16358 vdb-entry