CVE-2007-0408

UNKNOWN

BEA Weblogic Server 8

Published Jan 23, 2007

Modified 1 years ago

Details

BEA Weblogic Server 8.1 through 8.1 SP4 does not properly validate client certificates when reusing cached connections, which allows remote attackers to obtain access via an untrusted X.509 certificate.

References

ADVISORY

http://dev2dev.bea.com/pub/advisory/202

WEB

http://osvdb.org/38500

ADVISORY

http://secunia.com/advisories/23750

WEB

http://securitytracker.com/id?1017519

WEB

http://www.securityfocus.com/bid/22082

WEB

http://www.vupen.com/english/advisories/2007/0213

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2007-0408

CVSS Analysis

CVSS v2.0

7.5

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

PartialC:P

Integrity

PartialI:P

Availability

PartialA:P

7.5/AV:N/AC:L/Au:N/C:P/I:P/A:P

Ecosystems

Timeline

PublishedJan 23, 2007

ModifiedAug 7, 2024

CVE-2007-0408 | Mondoo Vulnerability Intelligence