Vulnerabilities > CVE-2005-4760 - Multiple vulnerability in BEA Weblogic Server 7.0/8.1
Attack vector
NETWORK Attack complexity
HIGH Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, when fullyDelegatedAuthorization is enabled for a servlet, does not cause servlet deployment to fail when failures occur in authorization or role providers, which might prevent the servlet from being "fully protected."
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 20 |