CVE-2007-0408 in WebLogicinfo

Summary

BEA Weblogic Server 8.1 through 8.1 SP4 does not properly validate client certificates when reusing cached connections, which allows remote attackers to obtain access via an untrusted X.509 certificate.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

01/22/2007

Disclosure

01/22/2007

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
2860	BEA WebLogic JRockit memory corruption	119	Proof-of-Concept	Official fix	CVE-2007-0408
2859	BEA WebLogic Profile Remote Code Execution		Proof-of-Concept	Official fix	CVE-2007-0408
2858	BEA WebLogic Sockets denial of service	404	Proof-of-Concept	Official fix	CVE-2007-0408
2857	BEA WebLogic HTTP Request denial of service	404	Proof-of-Concept	Official fix	CVE-2007-0408
2856	BEA WebLogic HTTP Request Remote Code Execution		Proof-of-Concept	Official fix	CVE-2007-0408
2855	BEA WebLogic EJB Remote Code Execution		Proof-of-Concept	Official fix	CVE-2007-0408
2854	BEA WebLogic EJB Remote Code Execution		Proof-of-Concept	Official fix	CVE-2007-0408
2853	BEA WebLogic WSSE Certificate Local Privilege Escalation		Proof-of-Concept	Official fix	CVE-2007-0408
2852	BEA WebLogic Access Control Update Local Privilege Escalation		Proof-of-Concept	Official fix	CVE-2007-0408
2851	BEA WebLogic web.xml denial of service	404	Proof-of-Concept	Official fix	CVE-2007-0408
2850	BEA WebLogic Backup config.xml missing encryption	311	Proof-of-Concept	Official fix	CVE-2007-0408
2849	BEA WebLogic ear File information disclosure	200	Proof-of-Concept	Official fix	CVE-2007-0408
2848	BEA WebLogic WS-Security Remote Code Execution		Proof-of-Concept	Official fix	CVE-2007-0408
2847	BEA WebLogic Thread Management denial of service	404	Proof-of-Concept	Official fix	CVE-2007-0408
2846	BEA WebLogic JDBCDataSourceFactory missing encryption	311	Proof-of-Concept	Official fix	CVE-2007-0408
2844	BEA WebLogic SSL missing encryption	311	Proof-of-Concept	Official fix	CVE-2007-0408

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

Sources

◂ PreviousOverviewNext ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!