Unscored CVE-2007-0408 EUVD-2007-0408GHSA-fjc9-59hf-f4qr

BEA Weblogic Server 8.1 through 8.1 SP4 does not properly validate client certificates when reusing cached connections, which allows remote…

Published Jan 23, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

BEA Weblogic Server 8.1 through 8.1 SP4 does not properly validate client certificates when reusing cached connections, which allows remote attackers to obtain access via an untrusted X.509 certificate.

References

23750 third-party-advisory
22082 vdb-entry
BEA07-135.00 vendor-advisory
ADV-2007-0213 vdb-entry
38500 vdb-entry
1017519 vdb-entry