Description
Unspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated users without "receive" permissions to bypass intended access restrictions and receive messages from a standalone JMS Topic or secured Distributed Topic member destination, related to durable subscriptions.
References
- BEA08-193.00 vendor-advisory
- 1019444 vdb-entry
- 29041 third-party-advisory
- ADV-2008-0612 vdb-entry