CVE-2007-0408

2007-01-22T19:28:00
ID CVE-2007-0408
Type cve
Reporter NVD
Modified 2011-03-07T21:49:42

Description

BEA Weblogic Server 8.1 through 8.1 SP4 does not properly validate client certificates when reusing cached connections, which allows remote attackers to obtain access via an untrusted X.509 certificate.