Description
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0, when an Administrator uses the WebLogic Administration Console to add custom security policies, causes incorrect policies to be created, which prevents the server from properly protecting JNDI resources.
References
- ADV-2006-0313 vdb-entry
- weblogic-jdni-security-weakness(24299) vdb-entry
- 1015528 vdb-entry
- 18592 third-party-advisory
- BEA06-119.00 vendor-advisory
- 16358 vdb-entry