CVE-2007-0433

Published: Jan 23, 2007Modified: Apr 23, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Unspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2, when using Active Directory LDAP for authentication, allows remote authenticated users to access the server even after the account has been disabled.

Affected (6)

Products: Bea: Aqualogic Service Bus

Bea

1 product

Aqualogic Service Bus

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Bea Aqualogic Service Bus	Version 2.0
Bea Aqualogic Service Bus	Version 2.0 sp1
Bea Aqualogic Service Bus	Version 2.0 sp2
Bea Aqualogic Service Bus	Version 2.1
Bea Aqualogic Service Bus	Version 2.1 sp1
Bea Aqualogic Service Bus	Version 2.2