CVE-2007-4614 BEA WebLogic Server 9.1 does not properly handle propagation of an admin server's security policy change log to temporarily unavailable managed servers, which might allow attackers to bypass intended....
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
BEA WebLogic Server 9.1 does not properly handle propagation of an admin server's security policy change log to temporarily unavailable managed servers, which might allow attackers to bypass intended restrictions, a different vulnerability than CVE-2007-0426.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bea weblogic server | = 9.1 | No fix listed |
References
- BEA07-149.00 patch vendor-advisory
- 45839 vdb-entry
- 22082 patch vdb-entry