CVE-2007-0408

Published: Jan 23, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

BEA Weblogic Server 8.1 through 8.1 SP4 does not properly validate client certificates when reusing cached connections, which allows remote attackers to obtain access via an untrusted X.509 certificate.

Affected (2)

Products: Bea: Weblogic Server

Bea

1 product

Weblogic Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Bea Weblogic Server	Up to 8.1
Bea Weblogic Server	Version 8.1

References (12)

http://dev2dev.bea.com/pub/advisory/202

Source: cve@mitre.org

PatchVendor Advisory

http://osvdb.org/38500

Source: cve@mitre.org

http://secunia.com/advisories/23750

Source: cve@mitre.org

http://securitytracker.com/id?1017519

Source: cve@mitre.org

http://www.securityfocus.com/bid/22082

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0213

Source: cve@mitre.org

http://dev2dev.bea.com/pub/advisory/202