Description
BEA WebLogic Portal 9.2 GA can corrupt a visitor entitlements role if an administrator provides a long role description, which might allow remote authenticated users to access privileged resources.
References
- 36065 vdb-entry
- weblogic-portal-entitlement-weak-security(34285) vdb-entry
- 25284 third-party-advisory
- BEA07-167.00 vendor-advisory
- 1018060 vdb-entry
- ADV-2007-1815 vdb-entry