EUVD-2007-0418

Malware in sbrugna...

CVE-2012-4549

The processInvocation function in org.jboss.as.ejb3.security.AuthorizationInterceptor in JBoss Enterprise Application Platform aka JBoss EAP or JBEAP before 6.0.1, authorizes all requests when no roles are allowed for an Enterprise Java Beans EJB method invocation, which allows attackers to bypas...

CVE-2007-0418

BEA WebLogic Server 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1 does not enforce a security policy that declares permissions for EJB methods that have array parameters, which allows remote attackers to obtain unauthorized access to these methods...

CVE-2007-0418

CVE-2007-0418 affects BEA WebLogic Server 7.0–7.0 SP6, 8.1–8.1 SP5, 9.0, and 9.1. The root cause is that the security policy does not declare permissions for EJB methods with array parameters, enabling remote attackers to obtain unauthorized access to these methods. Affects multiple versions; exp...