[SA18581] BEA WebLogic Server/Express Multiple Domains Administrator Access

TITLE:
BEA WebLogic Server/Express Multiple Domains Administrator Access

SECUNIA ADVISORY ID:
SA18581

VERIFY ADVISORY:
http://secunia.com/advisories/18581/

CRITICAL:
Less critical

IMPACT:
Security Bypass

WHERE:
>From remote

SOFTWARE:
BEA WebLogic Server 6.x
http://secunia.com/product/753/
BEA WebLogic Express 7.x
http://secunia.com/product/1282/
BEA WebLogic Express 6.x
http://secunia.com/product/1281/
BEA WebLogic Server 7.x
http://secunia.com/product/754/

DESCRIPTION:
A security issue has been reported in WebLogic Server and WebLogic
Express, which can be exploited by malicious users to bypass certain
security restrictions.

The problem is that an administrative user for a specific domain can
access other domains if the same WebLogic Server instance and machine
was used to create the domains.

The security issue affects the following versions:

• WebLogic Server and WebLogic Express 7.0 (all platforms)
• WebLogic Server and WebLogic Express 6.1 (all platforms)

SOLUTION:
The vendor recommends to create domains on different machines or
WebLogic Server instances, or use file permissions to restrict
access.

WebLogic Server 7.0:
http://e-docs.bea.com/wls/docs70/lockdown/practices.html#1128354

WebLogic Server 6.1:
http://e-docs.bea.com/wls/docs61/security/lockdown.html#1120529

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
http://dev2dev.bea.com/pub/advisory/165

---

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.