VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 31, 2007· Updated Jun 16, 2026

CVE-2007-4614

CVE-2007-4614

Description

BEA WebLogic Server 9.1 does not properly handle propagation of an admin server's security policy change log to temporarily unavailable managed servers, which might allow attackers to bypass intended restrictions, a different vulnerability than CVE-2007-0426.

Affected products

2
  • Bea/WebLogic Server2 versions
    cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:*
    • (no CPE)range: 9.1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.