CVE-2007-0432 | BDVDB-2026-21779 Detail

Description#

BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages to a proxy service, which might allow remote attackers to bypass authorization policies and route requests to back-end services or conduct other unauthorized activities.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/22082
http://secunia.com/advisories/23786
http://osvdb.org/32862
http://securitytracker.com/id?1017523
http://dev2dev.bea.com/pub/advisory/224

Exploit#

No public exploit known

History#

Version 12007-01-23Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.