CVEvulnerability

CVE-2007-4614

7.5 HIGH Published 2007-08-31 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-08-31
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses: CWE-264

Description

BEA WebLogic Server 9.1 does not properly handle propagation of an admin server's security policy change log to temporarily unavailable managed servers, which might allow attackers to bypass intended restrictions, a different vulnerability than CVE-2007-0426.

Affected configurations

• bea weblogic server 9.1

Weakness · not in database (1)

CWE-264

References

http://dev2dev.bea.com/pub/advisory/216 Patch
http://osvdb.org/45839 osvdb.org
http://www.securityfocus.com/bid/22082 Patch
http://dev2dev.bea.com/pub/advisory/216 Patch
http://osvdb.org/45839 osvdb.org
http://www.securityfocus.com/bid/22082 Patch

CVE-2007-4614

Description

Affected configurations

Related

Weakness · not in database (1)

References