CVE-2007-0426

Publicada em 23 jan 2007 · Atualizada em 07 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 3.3%

BEA WebLogic Portal 9.2, when running in a WebLogic Server clustered environment using WebLogic Portal entitlements, does not properly propagate entitlement policy changes if the changes are made on a managed server while the Administrative Server is unavailable, which might allow attackers to bypass intended restrictions.

Produtos afetados

n/a · n/a

Referências

http://dev2dev.bea.com/pub/advisory/223 http://osvdb.org/32854 http://osvdb.org/38516 http://secunia.com/advisories/23750 http://securitytracker.com/id?1017521 http://www.securityfocus.com/bid/22082 http://www.vupen.com/english/advisories/2007/0213