Unscored CVE-2008-0895 EUVD-2008-0902GHSA-m959-8wfp-9m54

BEA WebLogic Server and WebLogic Express 6.1 through 10.0 allows remote attackers to bypass authentication for application servlets via cra…

Published Feb 22, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

BEA WebLogic Server and WebLogic Express 6.1 through 10.0 allows remote attackers to bypass authentication for application servlets via crafted request headers.

References

29041 third-party-advisory
BEA08-191.00 vendor-advisory
ADV-2008-0612 vdb-entry
1019443 vdb-entry