Unscored CVE-2007-0415 EUVD-2007-0415GHSA-v3cx-67rh-3rjx

BEA WebLogic Server 8.1 through 8.1 SP5 does not properly enforce access control after a dynamic update and dynamic redeployment of an appl…

Published Jan 23, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

BEA WebLogic Server 8.1 through 8.1 SP5 does not properly enforce access control after a dynamic update and dynamic redeployment of an application that is implemented through exploded jars, which allows attackers to bypass intended access restrictions.

References

38509 vdb-entry
1017525 vdb-entry
23750 third-party-advisory
BEA07-142.00 vendor-advisory
22082 vdb-entry
ADV-2007-0213 vdb-entry