| Package | Affected versions | Patched versions |
|---|---|---|
| weblogic server | = 7.0= 8.1 |
BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, when fullyDelegatedAuthorization is enabled for a servlet, does not cause servlet deployment to fail when failures occur in authorization or role providers, which might prevent the servlet from being "fully protected."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free