← Database

CVE-2005-4756

HIGH CVSS: 7.5 Published: 2005-12-31 Modified: 2026-06-16

Description

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not properly validate derived Principals with multiple PrincipalValidators, which might allow attackers to gain privileges.

Affected Platforms

Bea Weblogic Server

Weakness Type

NVD-CWE-Other

References