← Database

CVE-2007-4614

HIGH CVSS: 7.5 Published: 2007-08-31 Modified: 2026-06-16

Description

BEA WebLogic Server 9.1 does not properly handle propagation of an admin server's security policy change log to temporarily unavailable managed servers, which might allow attackers to bypass intended restrictions, a different vulnerability than CVE-2007-0426.

Affected Platforms

Bea Weblogic Server

Weakness Type

CWE-264

References