CVE-2005-4760 | BDVDB-2026-16003 Detail

Description#

BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, when fullyDelegatedAuthorization is enabled for a servlet, does not cause servlet deployment to fail when failures occur in authorization or role providers, which might prevent the servlet from being "fully protected."

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://dev2dev.bea.com/pub/advisory/151
http://www.securityfocus.com/bid/15052
http://secunia.com/advisories/17138

Exploit#

No public exploit known

History#

Version 12006-04-01Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.