Secunia

A security issue has been reported in WebLogic Server and WebLogic Express, which can be exploited by malicious users to bypass certain security restrictions.

The problem is that an administrative user for a specific domain can access other domains if the same WebLogic Server instance and machine was used to create the domains.

The security issue affects the following versions:
* WebLogic Server and WebLogic Express 7.0 (all platforms)
* WebLogic Server and WebLogic Express 6.1 (all platforms)

Solution
The vendor recommends to create domains on different machines or WebLogic Server instances, or use file permissions to restrict access.
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://dev2dev.bea.com/pub/advisory/165

Deep Links
Links available in Customer Area