CVE-2007-2705
First published: Wed May 16 2007(Updated: )
Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through SP6, when "deployed in an exploded format," allows remote attackers to list a WebLogic Workshop Directory (wlwdir) parent directory via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| BEA WebLogic Workshop | =8.1-sp2 | |
| BEA WebLogic Workshop | =8.1-sp6 | |
| BEA WebLogic Integration | =9.2 | |
| BEA WebLogic Workshop | =8.1-sp4 | |
| BEA WebLogic Workshop | =8.1-sp5 | |
| BEA WebLogic Workshop | =8.1-sp3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- vendor/bea
- canonical/bea weblogic workshop
- version/bea weblogic workshop/8.1-sp2
- version/bea weblogic workshop/8.1-sp6
- canonical/bea weblogic integration
- version/bea weblogic integration/9.2
- version/bea weblogic workshop/8.1-sp4
- version/bea weblogic workshop/8.1-sp5
- version/bea weblogic workshop/8.1-sp3