CVE-2007-0408

2007-01-23T00:28:00
ID CVE-2007-0408
Type cve
Reporter cve@mitre.org
Modified 2011-03-08T02:49:00

Description

BEA Weblogic Server 8.1 through 8.1 SP4 does not properly validate client certificates when reusing cached connections, which allows remote attackers to obtain access via an untrusted X.509 certificate.