Security Advisory

CVE-2007-0415

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-01-23 00:00:00
Last updated 2024-08-07 12:19:30
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

BEA WebLogic Server 8.1 through 8.1 SP5 does not properly enforce access control after a dynamic update and dynamic redeployment of an application that is implemented through exploded jars, which allows attackers to bypass intended access restrictions.