CVE-2007-0408 — Weblogic Server vulnerability

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.9%
top 24.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
BEA Weblogic Server
Timeline
PublishedJan 23
Latest updateMay 1

Description

BEA Weblogic Server 8.1 through 8.1 SP4 does not properly validate client certificates when reusing cached connections, which allows remote attackers to obtain access via an untrusted X.509 certificate.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: dev2dev.bea.com ↗Patch: dev2dev.bea.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-fjc9-59hf-f4qr: BEA Weblogic Server 8↗2022-05-01
▶
CVEList
CVE-2007-0408: BEA Weblogic Server 8↗2007-01-23
▶
CVE-2007-0408 — BEA Weblogic Server vulnerability | cvebase