CVE-2007-0412

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP7, and 8.1 through 8.1 SP5 allows remote attackers to read arbitrary files inside the class-path property via .ear or exploded .ear files that use the manifest class-path property to point to utility jar files.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://dev2dev.bea.com/pub/advisory/206Patch, Vendor Advisory
http://osvdb.org/38505Broken Link
http://secunia.com/advisories/23750Third Party Advisory
http://securitytracker.com/id?1017525Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/22082Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/0213Third Party Advisory
http://dev2dev.bea.com/pub/advisory/206Patch, Vendor Advisory
http://osvdb.org/38505Broken Link
http://secunia.com/advisories/23750Third Party Advisory
http://securitytracker.com/id?1017525Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/22082Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/0213Third Party Advisory

Timeline

Published: Jan 23, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007