Unscored CVE-2007-0418 EUVD-2007-0418GHSA-cfjf-g325-9j7g

BEA WebLogic Server 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1 does not enforce a security policy that declares permissions for…

Published Jan 23, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

BEA WebLogic Server 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1 does not enforce a security policy that declares permissions for EJB methods that have array parameters, which allows remote attackers to obtain unauthorized access to these methods.

References

1017525 vdb-entry
23750 third-party-advisory
22082 vdb-entry
38512 vdb-entry
ADV-2007-0213 vdb-entry
BEA07-145.00 vendor-advisory