← Database

CVE-2007-0415

MEDIUM CVSS: 5.0 Published: 2007-01-23 Modified: 2026-06-16

Description

BEA WebLogic Server 8.1 through 8.1 SP5 does not properly enforce access control after a dynamic update and dynamic redeployment of an application that is implemented through exploded jars, which allows attackers to bypass intended access restrictions.

Affected Platforms

Bea Weblogic Server

Weakness Type

NVD-CWE-Other

References