CVE-2007-2696

The JMS Server in BEA WebLogic Server 6.1 through SP7, 7.0 through SP6, and 8.1 through SP5 enforces security access policies on the front end, which allows remote attackers to access protected queues via direct requests to the JMS back-end server.

Link	Resource
http://dev2dev.bea.com/pub/advisory/228	Patch Vendor Advisory
http://securitytracker.com/id?1018057
http://secunia.com/advisories/25284	Vendor Advisory
http://osvdb.org/36073
http://www.vupen.com/english/advisories/2007/1815
https://exchange.xforce.ibmcloud.com/vulnerabilities/34284

Configuration 1

cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*

---

Published : 2007-05-16 01:19

Updated : 2017-07-29 01:31

---

NVD link : CVE-2007-2696

Mitre link : CVE-2007-2696

No products.

NVD-CWE-Other