EUVD-2007-0416

Malware in sbrugna...

CVE-2007-0416

The WSEE runtime WS-Security runtime in BEA WebLogic Server 9.0 and 9.1 does not verify credentials when decrypting client messages, which allows remote attackers to bypass application security...

Authentication flaw

The WSEE runtime WS-Security runtime in BEA WebLogic Server 9.0 and 9.1 does not verify credentials when decrypting client messages, which allows remote attackers to bypass application security...

CVE-2007-0416

CVE-2007-0416 affects BEA WebLogic Server 9.0/9.1: the WSEE runtime (WS-Security runtime) does not verify credentials during decryption of client messages, enabling remote attackers to bypass application security. Exploitation details are not provided in the sources; CVSS base score is 7.5 (HIGH)...

CVE-2007-0416

The WSEE runtime WS-Security runtime in BEA WebLogic Server 9.0 and 9.1 does not verify credentials when decrypting client messages, which allows remote attackers to bypass application security...