cve/2005/CVE-2005-4760.md
2024-06-18 02:51:15 +02:00

764 B

CVE-2005-4760

Description

BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, when fullyDelegatedAuthorization is enabled for a servlet, does not cause servlet deployment to fail when failures occur in authorization or role providers, which might prevent the servlet from being "fully protected."

POC

Reference

Github

No PoCs found on GitHub currently.