← Database

CVE-2007-0408

HIGH CVSS: 7.5 Published: 2007-01-23 Modified: 2026-06-16

Description

BEA Weblogic Server 8.1 through 8.1 SP4 does not properly validate client certificates when reusing cached connections, which allows remote attackers to obtain access via an untrusted X.509 certificate.

Affected Platforms

Bea Weblogic Server

Weakness Type

NVD-CWE-Other

References