BEA WebLogic Server account locking bypass
Published:		26.02.2008
Source:		BUGTRAQ
SecurityVulns ID:		8720
Type:		remote
Level:		4/10
Description:		It's possible to bruteforce username/password of locked account.

Affected:		BEA : Weblogic 7.0
		BEA : Weblogic 8.1
		BEA : Weblogic 9.0

Original document

S21sec labs, S21SEC-040-en: Infinite invalid authentication attempts possible in BEA WebLogic Server (26.02.2008)

Discuss:

Read or add your comments to this news (0 comments)