Unscored CVE-2007-0416 EUVD-2007-0416GHSA-r94f-3fx8-fr52

The WSEE runtime (WS-Security runtime) in BEA WebLogic Server 9.0 and 9.1 does not verify credentials when decrypting client messages, whic…

Published Jan 23, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

The WSEE runtime (WS-Security runtime) in BEA WebLogic Server 9.0 and 9.1 does not verify credentials when decrypting client messages, which allows remote attackers to bypass application security.

References

1017525 vdb-entry
23750 third-party-advisory
22082 vdb-entry
38510 vdb-entry
ADV-2007-0213 vdb-entry
BEA07-143.00 vendor-advisory