Unscored CVE-2007-2696 EUVD-2007-2688GHSA-rjc5-hv86-58mm

The JMS Server in BEA WebLogic Server 6.1 through SP7, 7.0 through SP6, and 8.1 through SP5 enforces security access policies on the front …

Published May 16, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

The JMS Server in BEA WebLogic Server 6.1 through SP7, 7.0 through SP6, and 8.1 through SP5 enforces security access policies on the front end, which allows remote attackers to access protected queues via direct requests to the JMS back-end server.

References

1018057 vdb-entry
25284 third-party-advisory
weblogic-jms-security-bypass(34284) vdb-entry
BEA07-160.00 vendor-advisory
36073 vdb-entry
ADV-2007-1815 vdb-entry