Oracle WebLogic Admin State Unspecified Privilege Escalation (CVE-2008-4011)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified privilege escalation vulnerability such that some applications in admin state are made available to non-admin users. %NASLMINLEVEL 70300 C Tenable Network Security...

CVE-2008-4011

CVE-2008-4011 applies to BEA/Oracle WebLogic Server in BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, and 9.0. The vulnerability is described as unspecified, allowing remote authenticated users to affect integrity via unknown vectors. The associated NVD entry lists a network-accessible, high-complexit...