Security Advisory
CVE-2008-0895
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
BEA WebLogic Server and WebLogic Express 6.1 through 10.0 allows remote attackers to bypass authentication for application servlets via crafted request headers.