CVE-2007-0433

BEA AquaLogic Enterprise Security 2.0–2.0 SP2, 2.1–2.1 SP1, and 2.2 using Active Directory LDAP for authentication is vulnerable: remote authenticated users can access the server even after the account is disabled. Root cause/technical specifics beyond this description are not provided in the sup...

CVE-2007-0432

BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 contain a vulnerability where malformed request messages to a proxy service are not properly rejected, potentially allowing remote attackers to bypass authorization policies and route requests to back-end services or perform other unauthorized activitie...